User via web server administrator account may access local files on server with server account.
vulners.com/securityvulns/securityvulns:doc:2924