Important NoteIf you use the code in this article improperly, the code can be used to view folders outside of a Web site. For additional information on preventing this, click the article numbers below to view the articles in the Microsoft Knowledge Base:
General DisclaimerMicrosoft provides programming examples for illustration only, without warranty either expressed or implied. This includes, but is not limited to, the implied warranties of merchantability or fitness for a particular purpose. This article assumes that you are familiar with the programming language that is being demonstrated and with the tools that are used to create and to debug procedures. Microsoft support engineers can help explain the functionality of a particular procedure, but they will not modify these examples to provide added functionality or construct procedures to meet your specific requirements.
Page Viewer Example CodeUse the following steps to create the page viewer ASP page.
NOTE: You must have Basic/Clear Text, Integrated/NTLM, or Digest authentication enabled to use this example.
- Open Notepad on a Web server that is running Microsoft Internet Information Server version 4.0 or Internet Information Services version 5.0.
- Run the following ASP code:
<% @Language="VBScript" %>
On Error Resume Next ' don't worry about errors
' turn on buffering
Response.Buffer = True
' make sure that client is authenticated
If Len(Trim(CStr(Request.ServerVariables("LOGON_USER")))) = 0 Then
Response.Status = "401 Access Denied"
<!-- show a form to allow users to specify a file -->
<form action="<%=Request.ServerVariables("URL")%>" method="POST">
<input type="text" name="FILE" value="<%=Request.Form("FILE")%>">
<input type="submit" value="View File">
' was it a POST request?
If UCase(Request.ServerVariables("HTTP_METHOD")) = "POST" Then
' create object for file I/O
Set objFSO = Server.CreateObject("Scripting.FileSystemObject")
' open the specified file
Set objFILE = objFSO.OpenTextFile(Request.Form("FILE"))
' output message if an error has occured
If Err.Number <> 0 Then
Response.Write "Error trying open the file """ & _
Request.Form("FILE") & """" & vbCrLf & _
"Error Number = " & Err.Number & vbCrLf & _
"Error Description = " & Err.Description & vbCrLf
' otherwise show the file
' show the page start
Response.Write "----- START OF PAGE -----" & vbCrLf
' loop through the page contents
While Not objFILE.AtEndOfStream
Response.Write Server.HTMLEncode(objFILE.ReadLine) & vbCrLf
' show the page end
Response.Write "----- END OF PAGE -----" & vbCrLf
' close the specified file
' discard the file I/O object
Set objFSO = Nothing
- Save the page as "Viewer.asp"in the root folder of your Web site.
- Browse to the page through HTTP, and then enter the path of the directory that you want to view. The folder's contents should display.
REFERENCESFor additional information on this topic, click the article numbers below to view the articles in the Microsoft Knowledge Base:
Artikelnummer: 272656 – Letzte Überarbeitung: 30.07.2008 – Revision: 1