Security? "Error Disallowed Parent Path"

[RJ Dake]

Having problems with uploaded Database and SharePoint
sites. At least one of the errors is mentioned below.
Sites do not allow access to DB entry or results.

Email feedback is MOST appreciated!

Thanks,
RJ

Error message is as follows:

Active Server Pages error 'ASP 0131'
Disallowed Parent Path
/ocs/OCS_interface/OCStbl/results_page.as p, line 89
The Include file '../../_fpclass/fpdblib.inc' cannot
contain '..' to
indicate the parent directory.

[Ray at]

Re: Security? "Error Disallowed Parent Path"

Replies stay in the group.

Is this WS2003? Check that "enable parent paths" is enabled in the app
options on the home directory tab of your website properties dialog in your
IIS manager, assuming that IIS 6 dialogs are the same as IIS 5. I have not
yet seen IIS 6.

Ray at home

"RJ Dake" <rdake@edcenter .egusd.k12.ca.u s> wrote in message
news:148f01c388 95$b0855aa0$a30 1280a@phx.gbl.. .[color=blue]
> Having problems with uploaded Database and SharePoint
> sites. At least one of the errors is mentioned below.
> Sites do not allow access to DB entry or results.
>
> Email feedback is MOST appreciated!
>
> Thanks,
> RJ
>
> Error message is as follows:
>
> Active Server Pages error 'ASP 0131'
> Disallowed Parent Path
> /ocs/OCS_interface/OCStbl/results_page.as p, line 89
> The Include file '../../_fpclass/fpdblib.inc' cannot
> contain '..' to
> indicate the parent directory.
>[/color]

[RJ Dake]

Re: Security? &quot;Error Disallowed Parent Path&quot;

Ray,

I believe that this was disabled by our ServerGroup
Admins as a security issue (I think the lockdown tools
were used). Is there a workaround that is both secure
and functional and doesn't require tons of hand coding to
correct?

Thank you for your feedback!

RJ

[color=blue]
>-----Original Message-----
>Replies stay in the group.
>
>Is this WS2003? Check that "enable parent paths" is[/color]
enabled in the app[color=blue]
>options on the home directory tab of your website[/color]
properties dialog in your[color=blue]
>IIS manager, assuming that IIS 6 dialogs are the same as[/color]
IIS 5. I have not[color=blue]
>yet seen IIS 6.
>
>Ray at home
>
>"RJ Dake" <rdake@edcenter .egusd.k12.ca.u s> wrote in[/color]
message[color=blue]
>news:148f01c38 895$b0855aa0$a3 01280a@phx.gbl. ..[color=green]
>> Having problems with uploaded Database and SharePoint
>> sites. At least one of the errors is mentioned below.
>> Sites do not allow access to DB entry or results.
>>
>> Email feedback is MOST appreciated!
>>
>> Thanks,
>> RJ
>>
>> Error message is as follows:
>>
>> Active Server Pages error 'ASP 0131'
>> Disallowed Parent Path
>> /ocs/OCS_interface/OCStbl/results_page.as p, line 89
>> The Include file '../../_fpclass/fpdblib.inc' cannot
>> contain '..' to
>> indicate the parent directory.
>>[/color]
>
>
>.
>[/color]

[Ray at]

Re: Security? &quot;Error Disallowed Parent Path&quot;

Do virtual includes.

<!-- #include virtual="/_fpclass/fbdblib.inc" -->

This is assuming that your include file is in your site. The .inc extension
shouldn't be used, although IIS6 may protect from people downloading that.
Actually, I believe that the .net framework prevents people from downloading
..inc. But, you may want to rename the files with .asp extension anyway.

Ray at work

"RJ Dake" <rdake@edcenter .egusd.k12.ca.u s> wrote in message
news:169001c38c 7c$209bca60$7d0 2280a@phx.gbl.. .[color=blue]
> Ray,
>
> I believe that this was disabled by our ServerGroup
> Admins as a security issue (I think the lockdown tools
> were used). Is there a workaround that is both secure
> and functional and doesn't require tons of hand coding to
> correct?
>
> Thank you for your feedback!
>
> RJ
>
>[color=green]
> >-----Original Message-----
> >Replies stay in the group.
> >
> >Is this WS2003? Check that "enable parent paths" is[/color]
> enabled in the app[color=green]
> >options on the home directory tab of your website[/color]
> properties dialog in your[color=green]
> >IIS manager, assuming that IIS 6 dialogs are the same as[/color]
> IIS 5. I have not[color=green]
> >yet seen IIS 6.
> >
> >Ray at home
> >
> >"RJ Dake" <rdake@edcenter .egusd.k12.ca.u s> wrote in[/color]
> message[color=green]
> >news:148f01c38 895$b0855aa0$a3 01280a@phx.gbl. ..[color=darkred]
> >> Having problems with uploaded Database and SharePoint
> >> sites. At least one of the errors is mentioned below.
> >> Sites do not allow access to DB entry or results.
> >>
> >> Email feedback is MOST appreciated!
> >>
> >> Thanks,
> >> RJ
> >>
> >> Error message is as follows:
> >>
> >> Active Server Pages error 'ASP 0131'
> >> Disallowed Parent Path
> >> /ocs/OCS_interface/OCStbl/results_page.as p, line 89
> >> The Include file '../../_fpclass/fpdblib.inc' cannot
> >> contain '..' to
> >> indicate the parent directory.
> >>[/color]
> >
> >
> >.
> >[/color][/color]

[clevsone]

Similar

I had a similar issue and once I enabled parent paths it fixed some of the problem....

Now I can view the database.. but before i switched to MWS2003 this worked...

My website is mainly flash and I have a flash page that log's you into an .MDB using ASP.. pretty much using something similar to this here flash database..etc..
This worked fine until i switched to MWS2003 now when i click the enter button after typing in the proper username and password it does nothing.. Could this be a sever issue? and if so what settings do i need to change to allow this to run properly again?


any help would be much appreciated