Sandro
|
| Posted: 12/20/2003, 2:47 AM |
|
Codecharge creates this code for some pages stored in a subdirectory of my
site:
'Include Common Files @1-AED2A97A
%>
<!-- #INCLUDE FILE="..\Common.asp"-->
<!-- #INCLUDE FILE="..\Cache.asp" -->
<!-- #INCLUDE FILE="..\Template.asp" -->
<!-- #INCLUDE FILE="..\Sorter.asp" -->
<!-- #INCLUDE FILE="..\Navigator.asp" -->
<%
'End Include Common Files
I get ASP error 0131 - Disallowed Parent Path - on IIS 6 on Windows Server
2003.
This because the server option "Enable Parent Paths" is not checked.
If I want codecharge generated pages to run, I must enable this server
option.
Is there any way to modify generated code (not hard-code) that allows the
server option remains unchecked ?
Thanks
|
|
|
 |
DonB
|
| Posted: 12/20/2003, 5:16 AM |
|
<big smile>
I warned the codecharge support people about this exactly one week ago.
</big smile>
----------- from my caselog ---------------------
I am migrating existing code from a Win2000 server to a Win2003 server. It
will not run "as is".
The reason: IIS 6 prohibits "Parent Paths" (e.g., "../common.asp") by
default. The Microsoft documentation indicates this to be a security risk if
it is allowed, which apparently is the reason this ISP has left it turned
off. Refer to :
http://support.microsoft.com/default.aspx?scid=kb;en-us;332117
for details on this.
Although I have contacted the ISP about changing this, I have no reply yet.
You should be aware that this will most likely affect everyone who publishes
to IIS version 6 (if you are not already aware of it).
As I don't expect my ISP to change the setting, I will need your
recommendation on how to make the code work within the limits of this
restriction.
Don
----------------------------------------------
I wrote this on the subject, too:
http://www.gotodon.com/ccbth/Features/Knowledgebase.asp?find=2003
My ISP was happy to change the setting with no complaining at all.
--
DonB
http://www.gotodon.com/ccbth
"Sandro" <adp@giomi.com> wrote in message
news:bs19bk$ahj$1@news.codecharge.com...
> Codecharge creates this code for some pages stored in a subdirectory of my
> site:
>
> 'Include Common Files @1-AED2A97A
> %>
> <!-- #INCLUDE FILE="..\Common.asp"-->
> <!-- #INCLUDE FILE="..\Cache.asp" -->
> <!-- #INCLUDE FILE="..\Template.asp" -->
> <!-- #INCLUDE FILE="..\Sorter.asp" -->
> <!-- #INCLUDE FILE="..\Navigator.asp" -->
> <%
> 'End Include Common Files
>
> I get ASP error 0131 - Disallowed Parent Path - on IIS 6 on Windows Server
> 2003.
> This because the server option "Enable Parent Paths" is not checked.
> If I want codecharge generated pages to run, I must enable this server
> option.
> Is there any way to modify generated code (not hard-code) that allows the
> server option remains unchecked ?
>
> Thanks
>
>
>
|
|
|
|
Sandro
|
| Posted: 12/20/2003, 7:10 AM |
|
>My ISP was happy to change the setting with no complaining at all.
I think not all ISPs will do that...
"DonB" <~ccbth~@gotodon.com> ha scritto nel messaggio
news:bs1i2v$kk8$1@news.codecharge.com...
> <big smile>
> I warned the codecharge support people about this exactly one week ago.
> </big smile>
>
> ----------- from my caselog ---------------------
> I am migrating existing code from a Win2000 server to a Win2003 server. It
> will not run "as is".
>
> The reason: IIS 6 prohibits "Parent Paths" (e.g., "../common.asp") by
> default. The Microsoft documentation indicates this to be a security risk
if
> it is allowed, which apparently is the reason this ISP has left it turned
> off. Refer to :
>
> http://support.microsoft.com/default.aspx?scid=kb;en-us;332117
>
> for details on this.
>
> Although I have contacted the ISP about changing this, I have no reply
yet.
>
> You should be aware that this will most likely affect everyone who
publishes
> to IIS version 6 (if you are not already aware of it).
>
> As I don't expect my ISP to change the setting, I will need your
> recommendation on how to make the code work within the limits of this
> restriction.
>
> Don
> ----------------------------------------------
>
> I wrote this on the subject, too:
>
> http://www.gotodon.com/ccbth/Features/Knowledgebase.asp?find=2003
>
>
> My ISP was happy to change the setting with no complaining at all.
> --
> DonB
>
> http://www.gotodon.com/ccbth
>
>
> "Sandro" <adp@giomi.com> wrote in message
>news:bs19bk$ahj$1@news.codecharge.com...
> > Codecharge creates this code for some pages stored in a subdirectory of
my
> > site:
> >
> > 'Include Common Files @1-AED2A97A
> > %>
> > <!-- #INCLUDE FILE="..\Common.asp"-->
> > <!-- #INCLUDE FILE="..\Cache.asp" -->
> > <!-- #INCLUDE FILE="..\Template.asp" -->
> > <!-- #INCLUDE FILE="..\Sorter.asp" -->
> > <!-- #INCLUDE FILE="..\Navigator.asp" -->
> > <%
> > 'End Include Common Files
> >
> > I get ASP error 0131 - Disallowed Parent Path - on IIS 6 on Windows
Server
> > 2003.
> > This because the server option "Enable Parent Paths" is not checked.
> > If I want codecharge generated pages to run, I must enable this server
> > option.
> > Is there any way to modify generated code (not hard-code) that allows
the
> > server option remains unchecked ?
> >
> > Thanks
> >
> >
> >
>
>
|
|
|
|
DonB
|
| Posted: 12/20/2003, 12:47 PM |
|
I suspect that will be true. I was completely surprised by my ISP being so
willing to change.
--
DonB
http://www.gotodon.com/ccbth
"Sandro" <adp@giomi.com> wrote in message
news:bs1ooq$sjt$1@news.codecharge.com...
> >My ISP was happy to change the setting with no complaining at all.
>
> I think not all ISPs will do that...
>
> "DonB" <~ccbth~@gotodon.com> ha scritto nel messaggio
>news:bs1i2v$kk8$1@news.codecharge.com...
> > <big smile>
> > I warned the codecharge support people about this exactly one week ago.
> > </big smile>
> >
> > ----------- from my caselog ---------------------
> > I am migrating existing code from a Win2000 server to a Win2003 server.
It
> > will not run "as is".
> >
> > The reason: IIS 6 prohibits "Parent Paths" (e.g., "../common.asp") by
> > default. The Microsoft documentation indicates this to be a security
risk
> if
> > it is allowed, which apparently is the reason this ISP has left it
turned
> > off. Refer to :
> >
> > http://support.microsoft.com/default.aspx?scid=kb;en-us;332117
> >
> > for details on this.
> >
> > Although I have contacted the ISP about changing this, I have no reply
> yet.
> >
> > You should be aware that this will most likely affect everyone who
> publishes
> > to IIS version 6 (if you are not already aware of it).
> >
> > As I don't expect my ISP to change the setting, I will need your
> > recommendation on how to make the code work within the limits of this
> > restriction.
> >
> > Don
> > ----------------------------------------------
> >
> > I wrote this on the subject, too:
> >
> > http://www.gotodon.com/ccbth/Features/Knowledgebase.asp?find=2003
> >
> >
> > My ISP was happy to change the setting with no complaining at all.
> > --
> > DonB
> >
> > http://www.gotodon.com/ccbth
> >
> >
> > "Sandro" <adp@giomi.com> wrote in message
> >news:bs19bk$ahj$1@news.codecharge.com...
> > > Codecharge creates this code for some pages stored in a subdirectory
of
> my
> > > site:
> > >
> > > 'Include Common Files @1-AED2A97A
> > > %>
> > > <!-- #INCLUDE FILE="..\Common.asp"-->
> > > <!-- #INCLUDE FILE="..\Cache.asp" -->
> > > <!-- #INCLUDE FILE="..\Template.asp" -->
> > > <!-- #INCLUDE FILE="..\Sorter.asp" -->
> > > <!-- #INCLUDE FILE="..\Navigator.asp" -->
> > > <%
> > > 'End Include Common Files
> > >
> > > I get ASP error 0131 - Disallowed Parent Path - on IIS 6 on Windows
> Server
> > > 2003.
> > > This because the server option "Enable Parent Paths" is not checked.
> > > If I want codecharge generated pages to run, I must enable this server
> > > option.
> > > Is there any way to modify generated code (not hard-code) that allows
> the
> > > server option remains unchecked ?
> > >
> > > Thanks
> > >
> > >
> > >
> >
> >
>
>
|
|
|
|
|
