From what I remember, the default directory is the root dir ( / ).. it would be handy to have config options to specify the root dir (and prevent .. from accessing anything above of corse) for HTTP and FTP access.