From ceab369f4432f9b3e28d37ed6893db4a7640e59a Mon Sep 17 00:00:00 2001
From: Igor Sysoev <igor@sysoev.ru>
Date: Sun, 1 Apr 2007 09:03:14 +0000
Subject: [PATCH] disable $document_root variable in the "root/alias" directive

---
 src/http/ngx_http_core_module.c | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/src/http/ngx_http_core_module.c b/src/http/ngx_http_core_module.c
index 4a957d223..5683c2405 100644
--- a/src/http/ngx_http_core_module.c
+++ b/src/http/ngx_http_core_module.c
@@ -2659,6 +2659,17 @@ ngx_http_core_root(ngx_conf_t *cf, ngx_command_t *cmd, void *conf)
 
     value = cf->args->elts;
 
+    if (ngx_strstr(value[1].data, "$document_root") != 0
+        || ngx_strstr(value[1].data, "${document_root}") != 0)
+    {
+        ngx_conf_log_error(NGX_LOG_EMERG, cf, 0,
+                           "the $document_root variable may not be used "
+                           "in the \"%V\" directive",
+                           &cmd->name);
+
+        return NGX_CONF_ERROR;
+    }
+
     lcf->alias = alias;
     lcf->root = value[1];