FAQ: Q29

Link: http://www.ilopia.com/FAQ/FAQ.aspx?id=29

I cannot use  in my asp file. I get this error (or similar):
Active Server Pages error 'ASP 0131'
Disallowed Parent Path
/folder1/folder2/default.asp, line 3
The Included file '../test.asp' cannot contain '..' to indicate the parent directory.

IIS 6 is locked down by default. Parent Paths is a way for a hacker to navigate to a folder on the web server that has execute permissions, and in that way execute scripts that you normally shouldn't and wouldn't execute. If you enable this, make sure that you do not give execute permissions to a parent folder. To enable Parent Paths, follow these steps:

Click Start->Programs->Administrative Tools->Internet Information Services
Expand Web Sites and right click the web site you want to enable this for (i.e Default Web Site), click Properties
Click the Home directory tab and click the Configuration button
Click on the Options tab
Check the box Enable Parent Paths