Disable Parent Paths
Caution Parent paths allow you to use '..' in calls to MapPath and others. By default, this option is enabled. However, you should disable it.
To disable parent paths
In the Internet Information Services snap-in, right-click the site, and then click Properties.
In the Web Site Properties dialog box, click the Home Directory tab, and then click Configuration.
In the Application Configuration dialog box, click the App Options tab, and then clear the Enable parent paths check box.
Did you find this information useful? Please send your suggestions and comments about the documentation to