Changed rules

• You have 2 directories in the general location, download and test
You protected directory */download/ with a password
• A client request page /test/../download/

• The server will only send the index of c:/download/

• The server will ask for a password

• Fix 1
• Fix 2
• Fix 3
• Fix 5