PRB: Disabling Parent Paths Breaks User Interface (288309)


The information in this article applies to:

  • Microsoft Application Center 2000
  • Microsoft Internet Information Services 5.0
This article was previously published under Q288309

SYMPTOMS

In Microsoft's "Secure Internet Information Services 5 Checklist," available at http://www.microsoft.com/technet/prodtechnol/windows2000serv/technologies/iis/default.mspx, there is a recommendation to disable "parent paths". But if parent paths is disabled on the Application Center 2000 Admin Site in Internet Information Services (IIS), the Microsoft Management Console (MMC) will return the following error message:
ASP error 0131
The include file %filename.ext% cannot contain '..' to indicate the parent directory.
/%path%/%filename.ext%, line %number%

MORE INFORMATION

Microsoft Application Center 2000 Setup explicitly sets Enable Parent Paths. This is how the Application Center Admin Web site is structured. All directories are referenced via relative links. If the user changes the setting later, it will cause the user interface not to function.

Parent Paths

The Parent Paths option allows you to use ".." in calls to functions such as MapPath. By default, this option is enabled. Use the following procedure to enable the option if it has been disabled:
  1. Right-click the root of the Web site, and choose Properties from the context menu.
  2. Click the Home Directory tab.
  3. Click Configuration.
  4. Click the App Options tab.
  5. Select Enable Parent Paths.

REFERENCES

For additional information, click the article number below to view the article in the Microsoft Knowledge Base:

226474 Err Msg: Active Server Pages, ASP 0131 Disallowed Parent Path

Modification Type:MajorLast Reviewed:8/3/2006
Keywords:kbprb KB288309
©2004 Microsoft Corporation. All rights reserved.