As far as I know, $ENV{DOCUMENT_ROOT} is set by the server... it doesn't give the client a chance to tell it what it should be. The "safe" variables are the ones that define the server, not the client.

_____________________________________________________
Jeff[japhy]Pinyan: Perl, regex, and perl hacker, who'd like a job (NYC-area)
s++=END;++y(;-P)}y js++=;shajsj<++y(p-q)}?print:??;