Re: Application can not work properly

Tech-Archive recommends: Speed Up your PC by fixing your registry

From: Kristofer Gafvert (kgafvert_at_NEWSilopia.com)
Date: 07/28/04 

Date: Wed, 28 Jul 2004 17:12:07 +0200

Hello,

This KB Article explains the problem you are having, and also gives you two
solutions. One of them, the best one, is to use absolute virtual paths. The
other solution is to enable parent paths.

"Err Msg: Active Server Pages, ASP 0131 Disallowed Parent Path"
http://support.microsoft.com/default.aspx?scid=kb;en-us;Q226474

The reason _why_ you shouldn't enable parent paths is not written in that KB
Article, unfortunately. But, Parent Paths is a way for a hacker to navigate
to a folder on the web server that has execute permissions, and in that way
execute scripts that you normally shouldn't and wouldn't execute. If you
enable this, make sure that you do not give execute permissions to a parent
folder

Hope this helps you! 

-- 
Regards,
Kristofer Gafvert - IIS MVP
http://www.ilopia.com - When you need help!
"Need help.. Urgent." <NeedhelpUrgent@discussions.microsoft.com> wrote in
message news:67E57A74-B766-4248-AAEE-480119EE653F@microsoft.com...
> Hi all,
> I had develop a web application using ASP, it is running well in my PC(
Win 2k, IIS 5.0). But when move it into another Server(Win 2K, IIS 5.0)
> , it show below msg:
>
> Active Server Pages, ASP 0131 (0x80004005)
> The Include file '../Connections/connTraining.asp' cannot contain '..' to
indicate the parent directory.
> /training/home/default.asp, line 1
>
> Anybody can help?
>

Relevant Pages

  • Re: ABOUT IIS 6.0 Problem
    ... make sure that you do not give execute permissions to a ... parent folder. ... Check the box Enable Parent Paths ...
    (microsoft.public.inetserver.iis)
  • Re: IIS Setting "Enable Parent Path" and security implications
    ... looking from the client connecting to the server or the existing code on the ... can a hacker introduce ASP code with parent paths into my website ... Enable parent paths is set to no. ...
    (microsoft.public.inetserver.iis.security)
  • Re: Includes not working
    ... make sure that you do not give execute permissions to ... To enable Parent Paths, follow these steps: ... Expand Web Sites and right click the web site you want to enable this ... Check the box Enable Parent Paths ...
    (microsoft.public.inetserver.iis)
  • RE: OWA and Parent Paths
    ... I think owa need parent paths enabled ... ... will affect dynamic content and exchange OWA uses dynamic content... ... Disabling ASP Parent Paths will only affect the execution of dynamic ... Online Web Workshops: http://msdn.microsoft.com/workshop ...
    (microsoft.public.inetserver.iis.security)
  • Enable Parent Paths (IIS)
    ... I have checked the box for enable parent paths in a web sites ... I've verified thet *.asp is configured for GET, ... Active Server Pages error 'ASP 0131' ...
    (microsoft.public.windows.server.sbs)