Server Side Includes

[msdnexpert]

Dear all,
I have an include in my asp page as shown below.
<!-- #INCLUDE FILE="../Includes/Test.asp" -->
When I run the asp I get an error message
The Include file '../Includes/Test.asp' cannot contain '..' to indicate the parent directory.
Is it necessary that the include files be in the same directory as the asp page in which they are included?

[bsmith]

Try using the virtual parameter for the include.


<!-- #INCLUDE VIRTUAL="/Includes/Test.asp" -->

[JoshT]

I believe the ability to use "../" notation would present a security risk, as it could possibly allow access to "secure" OS files, etc.

Josh

[Clunietp]

You have to enable "Allow Parent Paths" in the Web App configuration thru the IIS manager

[msdnexpert]

Dear Clunietp,
Where do i set this setting in the web server. I mean where is IIS manager is it same as Administration site.

[Clunietp]

Go to the properties of your root app

Click on the home directory tab, click the configuration button

click on the app options tab, check "Enable Parent Paths"

This is what I have in Windows 2000, should be similar for IIS 4

[msdnexpert]

Dear Clunietp,
"Enable Parent Paths" is enabled on my web server yet I am getting the error. Any other suggestions.

[Clunietp]

Hmmm...that's all I can find on this one -- make sure you enable parent paths for the application, and if that doesn't work, try to enable them for the web site and finally the master web properties....