.png)
AspEnableParentPaths Metabase Property
The AspEnableParentPaths property specifies whether an ASP page allows paths relative to the current directory (using the ..\ notation). If set to true, this property constitutes a potential security risk, because an include path could access critical or confidential files outside the root directory of the application.
| Attribute Name | Attribute Value |
|---|---|
|
XML Data Type |
Boolean |
|
WMI Data Type |
Boolean |
|
ADSI Data Type |
Boolean |
|
ABO Data Type |
Boolean |
|
ABO Metabase Identifier |
MD_ASP_ENABLEPARENTPATHS |
|
Attributes |
INHERIT |
|
Default Value |
false |
|
MetaFlagsEx |
CACHE_PROPERTY_MODIFIED |
|
User Type |
SP_MD_UT_APP |
|
ID |
7008 |
Configurable Locations
You can configure this property at the following locations in the IIS metabase.
| Metabase Path | IIS Admin Object Type |
|---|---|
|
/LM/W3SVC/n/ROOT /LM/W3SVC/n/ROOT/virtual_directory_name |
IIsWebVirtualDir |
|
/LM/W3SVC/n |
IIsWebServer |
|
/LM/W3SVC |
IIsWebService |
|
/LM/W3SVC/n/ROOT/physical_directory_name /LM/W3SVC/n/virtual_directory_name/physical_directory_name |
IIsWebDirectory |
Code Example
For general code examples, see Code Examples to Configure Metabase Properties.
