we use lighttpd + lua as file server, the files served in /home/work/xxx/abc/*, we don\'t want file be accessed publicly, the request URL should be validated, an example URL
