Active Server Pages error 'ASP 0131'

Active Server Pages error 'ASP 0131'

Post by Michael » Sun, 21 Sep 2003 02:40:04



Good Day to all.
I recently installed service pack 4 for WIN2K Server and the latest .net
platform to run Storefront websoftware. Unfortunately, I am not sure when
this accurrance happened, but I am getting the error listed below for any
.asp pages. The aspx works fine when working in the storefront testing
site. I sure could use my pages back. Much data on there is needed.
Thank you.
Active Server Pages error 'ASP 0131'

Disallowed Parent Path

/osburn/asp's/Signs/Category.asp, line 32

The Include file '../../_fpclass/fpdblib.inc' cannot contain '..' to
indicate the parent directory.
 
 
 

Active Server Pages error 'ASP 0131'

Post by Tom Kamins » Sun, 21 Sep 2003 03:31:40


Change the path in your code to the include so it's more absolute and less
relative (i.e. remove the .. from the path).

--
Tom Kaminski IIS MVP
http://www.yqcomputer.com/ , scripts, and utilities for running IIS
http://www.yqcomputer.com/
http://www.yqcomputer.com/

 
 
 

Active Server Pages error 'ASP 0131'

Post by Michael » Sun, 21 Sep 2003 04:02:41

Tom,
I didnt write this code. Frontpage 2000 and I did it
together. IF this is the case, then I would have to
rewrite all my pages? I am lost on what you said to do.
Is this a code on each page or where?

This thing worked perfectly for about 3 years until I
updated that last service pack.

Thank you.
message

and the latest .net
I am not sure when
listed below for any
storefront testing
there is needed.
contain '..' to
absolute and less
utilities for running IIS
rs/iis/
 
 
 

Active Server Pages error 'ASP 0131'

Post by Tom Kamins » Sun, 21 Sep 2003 05:21:00


The SP apparently patched the parent path hole which can be used by hackers
to gain access to other resources on the server. It's good practice not to
use them and IIS 6 now comes locked-down by default to not allow them.
Unfortunately (or fortunately) yes, you'll need to go through all of your
code to fix those paths - that's a good thing though.

--
Tom Kaminski IIS MVP
http://www.yqcomputer.com/ , scripts, and utilities for running IIS
http://www.yqcomputer.com/
http://www.yqcomputer.com/
 
 
 

Active Server Pages error 'ASP 0131'

Post by v-wdx » Wed, 24 Sep 2003 10:38:33

Hi Michael,

Thank you for replying!

This is a security setting of service pack 4. The suggestion from Tom is
recommended though you will modify your codes which will strengthen the
secure of your asp web application and IIS. Furthermore, you can obtain
more information about this issue from these KB articles. Please go to:
226474 Err Msg: Active Server Pages, ASP 0131 Disallowed Parent Path
http://www.yqcomputer.com/

332117 Enable Parent Paths Is Disabled by Default in IIS 6.0
http://www.yqcomputer.com/

Does this answer your question? Thank you for using Microsoft NewsGroup!

Wei-Dong Xu
Microsoft Product Support Services
Get Secure! - www.microsoft.com/security
This posting is provided "AS IS" with no warranties, and confers no rights.
 
 
 

Active Server Pages error 'ASP 0131'

Post by VG9t » Thu, 04 Dec 2003 03:51:05

I am running IIS on a Windows Server 2003. The IIS si working fine exept when using ASP or ASP.Net pages.
When opening an ASP page I get the following error message:

Active Server Pages error 'ASP 0131'
Disallowed Parent Path
/testdb2_interface/Results/editor/list.asp, line 117
The Include file '../../../_fpclass/fpdblib.inc' cannot contain '..' to indicate the parent directory.

Thanks in advance,
Tom
 
 
 

Active Server Pages error 'ASP 0131'

Post by Mike » Thu, 04 Dec 2003 04:04:45

I believe parent paths are restricted by default in IIS 6 go to the iis
manager and enable the Parent Pathing

See this for more.
http://www.yqcomputer.com/ ;en-us;332117

Mike




when using ASP or ASP.Net pages.
indicate the parent directory.
 
 
 

Active Server Pages error 'ASP 0131'

Post by anonymou » Thu, 04 Dec 2003 08:06:04

Thanks Mike; it worked.
Tom
go to the iis
us;332117


working fine exept
message:
contain '..' to
 
 
 

Active Server Pages error 'ASP 0131'

Post by UnVubmluZz » Wed, 24 Dec 2003 02:26:16

Thank you Mike for your helpful tip. Fixed my problem too

Tony