nginx version: nginx/0.8.34 bug ( nginx protect folder dont work )

[conlele]

my config nginx.conf

        location /database/ {
          root /var/www/vhost/mysite.com/htdocs/database;
          index index.php index.html index.htm;
          allow xxx.xxx.xxx.xxx;
          allow yyy.yyy.yyy.yyy;
          deny all;
        }

when restart nginx with config.
any ip can open http://mysite.com/database/index.php

my nginx.config is wrong or true .

or nginx bug ?

please help me.

Posted at Nginx Forum: http://forum.nginx.org/read.php?2,71070,71070#msg-71070