Index: openacs-4/packages/acs-api-browser/www/content-page-view.tcl
===================================================================
RCS file: /usr/local/cvsroot/openacs-4/packages/acs-api-browser/www/content-page-view.tcl,v
diff -u -r1.3 -r1.3.12.1
--- openacs-4/packages/acs-api-browser/www/content-page-view.tcl	17 May 2003 09:38:28 -0000	1.3
+++ openacs-4/packages/acs-api-browser/www/content-page-view.tcl	25 Nov 2010 09:21:53 -0000	1.3.12.1
@@ -50,6 +50,11 @@
 
 set filename "[acs_root_dir]/$path"
 
+if {[regsub -all {[.][.]/} $filename "" shortened_filename]} {
+    ns_log notice "INTRUDER ALERT:\n\nsomesone tried to snarf '$filename'!\n  file exists: [file exists $filename]\n  user_id: [ad_conn user_id]\n  peer: [ad_conn peeraddr]\n"
+    set filename shortened_filename
+}
+
 if {![file exists $filename] || [file isdirectory $filename]} {
     set file_contents "file '$filename' not found"
 } else {