473,322 Members | 1,755 Online
Bytes | Software Development & Data Engineering Community
Post Job

Home Posts Topics Members FAQ

Join Bytes to post your question to a community of 473,322 software developers and data experts.

AspEnableParentPaths and Design Time Controls

I have created my site in the root (www.mysite.com) and have recently
added a directory called test (www.mysite.com/test/). The environment
setup is:

Server: Windows 2000 Server SP4
Development Machine: Windows 2000 Professional SP4
Development Software: Visual Interdev 6.0 SP5

When I drag DTC's onto a page in the new directory, I am propmted to
add the Scripting Object Model. Which according to the following
article, you have to say yes to:

PRB: Visual InterDev 6.0 Design-Time Controls Require Client-Side
Script
http://support.microsoft.com/default...b;en-us;221928

By selecting yes, the following code on gets placed onto the page

<% ' VI 6.0 Scripting Object Model Enabled %>
<!--#include file="../_ScriptLibrary/pm.asp"-->
<% if StartPageProcessing() Then Response.End() %>
<FORM name=thisForm METHOD=post>

Note the "../" before "_ScriptLibrary/pm.asp", this is obviously
placed there because the "_ScriptLibrary/pm.asp" is located in the
root of the project. This code cannot be modified through Interdev,
thus negating the resolution in the following article:

Err Msg: Active Server Pages, ASP 0131 Disallowed Parent Path
http://support.microsoft.com/default...b;en-us;226474

It can however be manually edited in notepad (which does work), but
this could prove to be quite tedious.

The alternative solution is NOT an option, as our servers must matain
a strict level of security. Note the security articles published by
Microsoft:

Secure Internet Information Services 5 Checklist
http://www.microsoft.com/technet/tre...ps/iis5chk.asp

Suggests Disable Parent Paths
The Parent Paths option allows you to use ".." in calls to functions
such as MapPath. By default, this option is enabled, and you should
disable it.

AND

AspEnableParentPaths MetaBase Property Should Be Set To False
http://support.microsoft.com/default...b;en-us;184717

Reiterates the first or vice versa.

What I would like to know is if there is a method, other than manual
method, whereby I drag the DTC onto my page and the following code is
automattically placed on my page:

<% ' VI 6.0 Scripting Object Model Enabled %>
<!--#include virtual="/_ScriptLibrary/pm.asp"-->
<% if StartPageProcessing() Then Response.End() %>
<FORM name=thisForm METHOD=post>

Any help would be much appreciated!
Jul 19 '05 #1
3 3662
Design-time controls are evil. Avoid them at all costs.

"Scott" <sc***************@hotmail.com> wrote in message
news:2f**************************@posting.google.c om...
I have created my site in the root (www.mysite.com) and have recently
added a directory called test (www.mysite.com/test/). The environment
setup is:

Server: Windows 2000 Server SP4
Development Machine: Windows 2000 Professional SP4
Development Software: Visual Interdev 6.0 SP5

When I drag DTC's onto a page in the new directory, I am propmted to
add the Scripting Object Model. Which according to the following
article, you have to say yes to:

PRB: Visual InterDev 6.0 Design-Time Controls Require Client-Side
Script
http://support.microsoft.com/default...b;en-us;221928

By selecting yes, the following code on gets placed onto the page

<% ' VI 6.0 Scripting Object Model Enabled %>
<!--#include file="../_ScriptLibrary/pm.asp"-->
<% if StartPageProcessing() Then Response.End() %>
<FORM name=thisForm METHOD=post>

Note the "../" before "_ScriptLibrary/pm.asp", this is obviously
placed there because the "_ScriptLibrary/pm.asp" is located in the
root of the project. This code cannot be modified through Interdev,
thus negating the resolution in the following article:

Err Msg: Active Server Pages, ASP 0131 Disallowed Parent Path
http://support.microsoft.com/default...b;en-us;226474

It can however be manually edited in notepad (which does work), but
this could prove to be quite tedious.

The alternative solution is NOT an option, as our servers must matain
a strict level of security. Note the security articles published by
Microsoft:

Secure Internet Information Services 5 Checklist
http://www.microsoft.com/technet/tre...ps/iis5chk.asp
Suggests Disable Parent Paths
The Parent Paths option allows you to use ".." in calls to functions
such as MapPath. By default, this option is enabled, and you should
disable it.

AND

AspEnableParentPaths MetaBase Property Should Be Set To False
http://support.microsoft.com/default...b;en-us;184717

Reiterates the first or vice versa.

What I would like to know is if there is a method, other than manual
method, whereby I drag the DTC onto my page and the following code is
automattically placed on my page:

<% ' VI 6.0 Scripting Object Model Enabled %>
<!--#include virtual="/_ScriptLibrary/pm.asp"-->
<% if StartPageProcessing() Then Response.End() %>
<FORM name=thisForm METHOD=post>

Any help would be much appreciated!

Jul 19 '05 #2
Took your advice and I have rewritten an entire site using VB for SQL
interaction Server-Side and Java Script for Client-Side. This has
proved to be a very educational exercise, as well as a wake up call to
how sloppy my code was before.

Now my site functions on most platforms. Whereas, before my site was
pretty much IE 5 or greater compliant ONLY.
Jul 19 '05 #3
You definitely did the right thing. You'll probably also notice your app
runs much faster than with DTCs. I found so many major problems with DTC's
years ago when I was first learning ASP that I forced myself to hand-code
everything too (still using Interdev).

"Scott" <sc***************@hotmail.com> wrote in message
news:2f**************************@posting.google.c om...
Took your advice and I have rewritten an entire site using VB for SQL
interaction Server-Side and Java Script for Client-Side. This has
proved to be a very educational exercise, as well as a wake up call to
how sloppy my code was before.

Now my site functions on most platforms. Whereas, before my site was
pretty much IE 5 or greater compliant ONLY.

Jul 19 '05 #4

This thread has been closed and replies have been disabled. Please start a new discussion.

Similar topics

10
by: Matt Fielder | last post by:
I have developed a custom control to be used in my application. My application includes a form designer, so the control can be hosted while designmode for the control is either true or false,...
0
by: Jason | last post by:
What interface do I need to implement in order to get a component with a public property to show up in the data binding drop down boxes at design time in VS.net? I've tried to look just about...
0
by: jb_in_marietta | last post by:
All, I have written a very simple custom composite control that includes a control of type System.Web.UI.WebControls.Table. The control renders fine in run time, but for some reason, it does...
17
by: tshad | last post by:
Many (if not most) have said that code-behind is best if working in teams - which does seem logical. How do you deal with the flow of the work? I have someone who is good at designing, but...
7
by: Shimon Sim | last post by:
I have a custom composite control I have following property
1
by: PJ6 | last post by:
I have a simple container that I want to be able to use at design-time - as in, be able to drag a control into it and drop it in. I already went through of some problems in WinForms that this kind...
14
by: Jan Nielsen | last post by:
Hi In Microsoft Access it is possible to write code like this Sub test() DoCmd.OpenForm "TestForm", acDesign Dim a As Control For Each a In Forms("TestForm").Controls Do stuff Next End Sub
5
by: gerry | last post by:
I am trying to create a custom container control that will only ever contain a specific type of control. At design time, when a control of a different type is added to the container I would like...
4
by: Ken Fine | last post by:
I've been living with a frustrating issue with VS.NET for some months now and I need to figure out what the problem is. Hopefully someone has run into the same issue and can suggest a fix. I...
0
by: DolphinDB | last post by:
Tired of spending countless mintues downsampling your data? Look no further! In this article, you’ll learn how to efficiently downsample 6.48 billion high-frequency records to 61 million...
0
by: ryjfgjl | last post by:
ExcelToDatabase: batch import excel into database automatically...
1
isladogs
by: isladogs | last post by:
The next Access Europe meeting will be on Wednesday 6 Mar 2024 starting at 18:00 UK time (6PM UTC) and finishing at about 19:15 (7.15PM). In this month's session, we are pleased to welcome back...
0
by: Vimpel783 | last post by:
Hello! Guys, I found this code on the Internet, but I need to modify it a little. It works well, the problem is this: Data is sent from only one cell, in this case B5, but it is necessary that data...
0
by: jfyes | last post by:
As a hardware engineer, after seeing that CEIWEI recently released a new tool for Modbus RTU Over TCP/UDP filtering and monitoring, I actively went to its official website to take a look. It turned...
0
by: ArrayDB | last post by:
The error message I've encountered is; ERROR:root:Error generating model response: exception: access violation writing 0x0000000000005140, which seems to be indicative of an access violation...
1
by: Defcon1945 | last post by:
I'm trying to learn Python using Pycharm but import shutil doesn't work
0
by: af34tf | last post by:
Hi Guys, I have a domain whose name is BytesLimited.com, and I want to sell it. Does anyone know about platforms that allow me to list my domain in auction for free. Thank you
0
isladogs
by: isladogs | last post by:
The next Access Europe User Group meeting will be on Wednesday 3 Apr 2024 starting at 18:00 UK time (6PM UTC+1) and finishing by 19:30 (7.30PM). In this session, we are pleased to welcome former...

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.