Parent Paths and IIS 6.0

[Cathi Odtohan]

We recently upgraded our WindowsNT 4.0 server with IIS 4.0 to WindowsServer
2003 with IIS 6.0.
EndUsers are using FrontPage Server 2002 to generate web pages.

One of the security features of IIS 6.0 is default disabling of Parent
Paths. Unfortunately, when FrontPage 2002 generates *.asp pages using the
Database Results Wizard, the #include statements always use relative parent
paths. Is there a way to make FrontPage2002 use absolute paths? Is this
problem resolved in FrontPage2003?

Any advice is appreciated.
Thanks!

 

[Thomas A. Rowe]

You can re-enable. There is no setting in FP to control this.

--
==============================================
Thomas A. Rowe (Microsoft MVP - FrontPage)
WEBMASTER Resources(tm)

FrontPage Resources, WebCircle, MS KB Quick Links, etc.
==============================================

 

[Kevin Spencer]

Unfortunately, allowing parent paths CAN lead to attacks on your web server,
which is why it is disallowed by default. However, you can overcome this by
putting your web server's directories on a different drive than the
Operating System.

--
HTH,
Kevin Spencer
..Net Developer
Microsoft MVP
Big things are made up
of lots of little things.

 

[Thomas A. Rowe]

At least with my web host, websites are not stored on the OS boot drive of the server, so it is safe
to allow the use of Parent_Paths.

--
==============================================
Thomas A. Rowe (Microsoft MVP - FrontPage)
WEBMASTER Resources(tm)

FrontPage Resources, WebCircle, MS KB Quick Links, etc.
==============================================

 

[Tom Pepper Willett]

Same here. We don't even use the INET Pub directory or the c drive.
--
=====================================================
Tom Pepper Willett [Microsoft MVP - FrontPage]
----------------------------------------------------------------------------
-
Microsoft FrontPage:
http://www.microsoft.com/office/frontpage/prodinfo/default.mspx
http://msdn.microsoft.com/office/understanding/frontpage/

=====================================================