Share via

AspEnableParentPaths Metabase Property

  • Article

Applies To: Windows Server 2003, Windows Server 2003 with SP1

The AspEnableParentPaths property specifies whether an ASP page allows paths relative to the current directory (using the ..\ notation). If set to true, this property constitutes a potential security risk, because an include path could access critical or confidential files outside the root directory of the application.

Attribute Name Attribute Value

XML Data Type

Boolean

WMI Data Type

Boolean

ADSI Data Type

Boolean

ABO Data Type

Boolean

ABO Metabase Identifier

MD_ASP_ENABLEPARENTPATHS

Attributes

INHERIT

Default Value

false

MetaFlagsEx

CACHE_PROPERTY_MODIFIED

User Type

SP_MD_UT_APP

ID

7008

Configurable Locations

You can configure this property at the following locations in the IIS metabase.

Metabase Path IIS Admin Object Type

/LM/W3SVC/n/ROOT /LM/W3SVC/n/ROOT/virtual_directory_name

IIsWebVirtualDir

/LM/W3SVC/n

IIsWebServer

/LM/W3SVC

IIsWebService

/LM/W3SVC/n/ROOT/physical_directory_name /LM/W3SVC/n/virtual_directory_name/physical_directory_name

IIsWebDirectory

Code Example

For general code examples, see Code Examples to Configure Metabase Properties.