AspEnableParentPaths
AspEnableParentPaths specifies whether an ASP page allows paths relative to the current directory (using the ..\ notation). If set to true,this propertyconstitutes a potential security risk, because an include path could access critical or confidential files outside the root directory of the application.
Attribute Name | Attribute Value |
---|---|
XML Data Type | Boolean |
WMI Data Type |
Boolean
|
ADSI Data Type | Boolean |
ABO Data Type | Boolean |
ABO Metabase identifier |
MD_ASP_ENABLEPARENTPATHS
|
Attributes | INHERIT |
Default Value | false |
MetaFlagsEx | CACHE_PROPERTY_MODIFIED |
User Type | ASP_MD_UT_APP |
StartingNumber | Not applicable |
EndingNumber | 0 |
ID | 7008 |
Configurable Locations
You can configure this property at the following locations in the IIS metabase.
Metabase Path | IIS Admin Object Type |
---|---|
/LM/W3SVC/n/ROOT /LM/W3SVC/n/ROOT/virtual_directory_name |
IIsWebVirtualDir |
/LM/W3SVC/n | IIsWebServer |
/LM/W3SVC | IIsWebService |
/LM/W3SVC/n/ROOT/physical_directory_name /LM/W3SVC/n/virtual_directory_name/physical_directory_name |
IIsWebDirectory |
Code Example
For general code examples, please see Code Examples to Configure Metabase Properties