PDA

View Full Version : "Disallowed Parent Path" error


Bluemonkey
07-08-2003, 10:40 AM
can anyone tell me how to egt round this error

Active Server Pages error 'ASP 0131'

Disallowed Parent Path

/sac/members/welcome.asp, line 16

The Include file '../menu/subpmenu.asp' cannot contain '..' to indicate the parent directory.


the code on line 16 is

<!--#include file="../menu/subpmenu.asp" -->

but this works fine on my webserver (win2kserver iis) and my xp server(xp pro) but not on my work server (windows 2000)


cheers for the help

raf
07-08-2003, 01:24 PM
problem is probably that you've got a smart systemadmin or webserver-manager.

Parent referencing ( the ..) should be disabled on all productionservers, cause it's a huge securityrisk, so you need to use virtual include
Probalby<!-- #Include virtual="/menu/subpmenu.asp " -->

(adresses start at the virtual root --> folder on webserver where your index.asp or whatever is in)

Bluemonkey
07-08-2003, 01:29 PM
cheers for the help