What if it is set to /etc/passwd? Also take a look at CGI, by the use of $1 it looks like you are trying to roll your own.