Fix number 1
About /../ and the fix
/../ means one level up in the directory this way annybody could download any file he knew the filename off, example:
- The server location is c:/myweb/wwwroot/
- The request url is /../
In older versions the client will receive the index page in directory c:/myweb/ witch is lower than is allowed, in the versions 1.03.2 and up the server will just close the connection