Security? "Error Disallowed Parent Path"

RJ Dake

Having problems with uploaded Database and SharePoint
sites. At least one of the errors is mentioned below.
Sites do not allow access to DB entry or results.

Email feedback is MOST appreciated!

Thanks,
RJ

Error message is as follows:

Active Server Pages error 'ASP 0131'
Disallowed Parent Path
/ocs/OCS_interface/OCStbl/results_page.asp, line 89
The Include file '../../_fpclass/fpdblib.inc' cannot
contain '..' to
indicate the parent directory.

Jul 19 '05 #1

Ray at

Replies stay in the group.

Is this WS2003? Check that "enable parent paths" is enabled in the app
options on the home directory tab of your website properties dialog in your
IIS manager, assuming that IIS 6 dialogs are the same as IIS 5. I have not
yet seen IIS 6.

Ray at home

"RJ Dake" <rd***@edcenter.egusd.k12.ca.us> wrote in message
news:14****************************@phx.gbl...

Having problems with uploaded Database and SharePoint
sites. At least one of the errors is mentioned below.
Sites do not allow access to DB entry or results.

Email feedback is MOST appreciated!

Thanks,
RJ

Error message is as follows:

Active Server Pages error 'ASP 0131'
Disallowed Parent Path
/ocs/OCS_interface/OCStbl/results_page.asp, line 89
The Include file '../../_fpclass/fpdblib.inc' cannot
contain '..' to
indicate the parent directory.

Jul 19 '05 #2

RJ Dake

Ray,

I believe that this was disabled by our ServerGroup
Admins as a security issue (I think the lockdown tools
were used). Is there a workaround that is both secure
and functional and doesn't require tons of hand coding to
correct?

Thank you for your feedback!

RJ

-----Original Message-----
Replies stay in the group.

Is this WS2003? Check that "enable parent paths" is enabled in the appoptions on the home directory tab of your website properties dialog in yourIIS manager, assuming that IIS 6 dialogs are the same as IIS 5. I have notyet seen IIS 6.

Ray at home

"RJ Dake" <rd***@edcenter.egusd.k12.ca.us> wrote in messagenews:14****************************@phx.gbl...

Having problems with uploaded Database and SharePoint
sites. At least one of the errors is mentioned below.
Sites do not allow access to DB entry or results.

Email feedback is MOST appreciated!

Thanks,
RJ

Error message is as follows:

Active Server Pages error 'ASP 0131'
Disallowed Parent Path
/ocs/OCS_interface/OCStbl/results_page.asp, line 89
The Include file '../../_fpclass/fpdblib.inc' cannot
contain '..' to
indicate the parent directory.

.

Jul 19 '05 #3

Ray at

Do virtual includes.

<!-- #include virtual="/_fpclass/fbdblib.inc" -->

This is assuming that your include file is in your site. The .inc extension
shouldn't be used, although IIS6 may protect from people downloading that.
Actually, I believe that the .net framework prevents people from downloading
..inc. But, you may want to rename the files with .asp extension anyway.

Ray at work

"RJ Dake" <rd***@edcenter.egusd.k12.ca.us> wrote in message
news:16****************************@phx.gbl...

Ray,

I believe that this was disabled by our ServerGroup
Admins as a security issue (I think the lockdown tools
were used). Is there a workaround that is both secure
and functional and doesn't require tons of hand coding to
correct?

Thank you for your feedback!

RJ

-----Original Message-----
Replies stay in the group.

Is this WS2003? Check that "enable parent paths" is

enabled in the app

options on the home directory tab of your website

properties dialog in your

IIS manager, assuming that IIS 6 dialogs are the same as

IIS 5. I have not

yet seen IIS 6.

Ray at home

"RJ Dake" <rd***@edcenter.egusd.k12.ca.us> wrote in

message

news:14****************************@phx.gbl...

Having problems with uploaded Database and SharePoint
sites. At least one of the errors is mentioned below.
Sites do not allow access to DB entry or results.

Email feedback is MOST appreciated!

Thanks,
RJ

Error message is as follows:

Active Server Pages error 'ASP 0131'
Disallowed Parent Path
/ocs/OCS_interface/OCStbl/results_page.asp, line 89
The Include file '../../_fpclass/fpdblib.inc' cannot
contain '..' to
indicate the parent directory.

.

Jul 19 '05 #4

clevsone

I had a similar issue and once I enabled parent paths it fixed some of the problem....

Now I can view the database.. but before i switched to MWS2003 this worked...

My website is mainly flash and I have a flash page that log's you into an .MDB using ASP.. pretty much using something similar to this here flash database..etc..
This worked fine until i switched to MWS2003 now when i click the enter button after typing in the proper username and password it does nothing.. Could this be a sever issue? and if so what settings do i need to change to allow this to run properly again?


any help would be much appreciated

May 11 '06 #5