my $rel = $ENV{SCRIPT_URL};
my $fn =  "$ENV{DOCUMENT_ROOT}/$fn";

my $absfn = absolutepath( $fn );

die ( "nicht innerhalb $ENV{DOCUMENT_ROOT}!" ) 
  if ( $absfn !~ /^$ENV{DOCUMENT_ROOT}/ );