PRB: Disabling Parent Paths Breaks User Interface

This article was previously published under Q288309
This article has been archived. It is offered "as is" and will no longer be updated.
SYMPTOMS
In Microsoft's "Secure Internet Information Services 5 Checklist," available at http://technet.microsoft.com/en-us/windowsserver/2000/bb735378.aspx, there is a recommendation to disable "parent paths". But if parent paths is disabled on the Application Center 2000 Admin Site in Internet Information Services (IIS), the Microsoft Management Console (MMC) will return the following error message:
ASP error 0131
The include file %filename.ext% cannot contain '..' to indicate the parent directory.
/%path%/%filename.ext%, line %number%
MORE INFORMATION
Microsoft Application Center 2000 Setup explicitly sets Enable Parent Paths. This is how the Application Center Admin Web site is structured. All directories are referenced via relative links. If the user changes the setting later, it will cause the user interface not to function.

Parent Paths

The Parent Paths option allows you to use ".." in calls to functions such as MapPath. By default, this option is enabled. Use the following procedure to enable the option if it has been disabled:
  1. Right-click the root of the Web site, and choose Properties from the context menu.
  2. Click the Home Directory tab.
  3. Click Configuration.
  4. Click the App Options tab.
  5. Select Enable Parent Paths.
REFERENCES
For additional information, click the article number below to view the article in the Microsoft Knowledge Base:
226474 Err Msg: Active Server Pages, ASP 0131 Disallowed Parent Path
Properties

Article ID: 288309 - Last Review: 10/23/2013 16:12:30 - Revision: 3.2

  • Microsoft Application Center 2000 Standard Edition
  • Microsoft Internet Information Services 5.0
  • kbnosurvey kbarchive kbprb KB288309
Feedback