You may also need to make sure that you're telling your browser to connect through the webserver -- There is a big difference between file:///script and http://localhost/script. No matter what my previous company's 'communications' group would like to believe, the default protocol for all communications is not http, and you should not assume that people/programs/whatever will automatically insert it.

(as well as I remember from my windows days, specifying c:\script will assume file:///, which is a disk read from the local system, and will not get interpreted by the webserver, which may cause it to be parsed/executed/whatever.)