AspEnableParentPaths
AspEnableParentPaths specifies whether an ASP page allows paths relative to the current directory (using the ..\ notation). If set to true,this propertyconstitutes a potential security risk, because an include path could access critical or confidential files outside the root directory of the application.
| Attribute Name | Attribute Value |
|---|---|
| XML Data Type | Boolean |
| WMI Data Type |
Boolean
|
| ADSI Data Type | Boolean |
| ABO Data Type | Boolean |
| ABO Metabase identifier |
MD_ASP_ENABLEPARENTPATHS
|
| Attributes | INHERIT |
| Default Value | false |
| MetaFlagsEx | CACHE_PROPERTY_MODIFIED |
| User Type | ASP_MD_UT_APP |
| StartingNumber | Not applicable |
| EndingNumber | 0 |
| ID | 7008 |
Configurable Locations
You can configure this property at the following locations in the IIS metabase.
| Metabase Path | IIS Admin Object Type |
|---|---|
| /LM/W3SVC/n/ROOT /LM/W3SVC/n/ROOT/virtual_directory_name |
IIsWebVirtualDir |
| /LM/W3SVC/n | IIsWebServer |
| /LM/W3SVC | IIsWebService |
| /LM/W3SVC/n/ROOT/physical_directory_name /LM/W3SVC/n/virtual_directory_name/physical_directory_name |
IIsWebDirectory |
Code Example
For general code examples, please see Code Examples to Configure Metabase Properties