Disallowed Parent Path

January 18, 2004 by fidelis semper
I'm having the same problem, but except that I do not control my IIS, it's my provider. Basically my provider has deliberatly disabled using parent path. I get the error, so in all my page I've changed all the ""../" to "/", the only error now comes fron the incPureUpload.asp, line 204. Any idea how I can go round this or even change the parent path from building up string "../" to building up "/" instead.

Any help will be greatly appreciated.

RE: Disallowed Parent Path

January 21, 2004 by George Petrov
get the latest Pure ASP Upload 2.17 - there you can specify that you want absolute paths

Don't use parent paths in the first place!

June 22, 2004 by Ken Schiff
While this solution works, it is questionable at best because it is a security risk. The reason parent paths are disabled by default in Windows 2003 is for this reason. Yes, the proposed solution works, but the real issue is whether or not you should use parent paths.

Security concerns forenabling parentpath

June 28, 2004 by John Gough

I'm trying to launch a new site on a "major" web hosting "shared" server. My pages are ALL .asp data driven thus the default DMX Include (Connection) file call renders an error on every page but the "index". The host suggested security concerns and my first search reference on google suggested the same ( Michael Howard and David LeBlanc Writing Secure Code) - that parentpaths should never be enabled. So how about a solution - I tried the absolute file path address (e.g. <!--#include file="http://www.sampleaddress.com/Connections/dbfile.asp" -->) but this did not work.