directory 'path' needs to grant read and execute privs to the webserver user, and directory 'to' needs to grant read and execute privs to the webserver user, and file read_file.html needs to grant read privs to the webserver user.