Server-side include directives (#include) return 404 error (for .stm files) or 0131 error (for .asp files)

  • Article

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1

If your ASP page uses the #include server-side include directive and the ".." notation to refer to a parent directory, the directive will return an error unless you have reconfigured the AspEnableParentPaths Metabase Property. This property is set to false by default.

Important

If you set the AspEnableParentPaths property to true, a potential security risk is introduced because an include path might access critical or confidential files outside of the application root directory.

Procedures

To enable parent paths through IIS Manager

  1. In IIS Manager, expand the local computer, right-click the starting-point directory of the application you want to configure, and then click Properties.

  2. Click the Directory tab, and then click Configuration.

  3. Click the Options tab.

  4. In the Application configuration section, select the Enable parent paths check box.

  5. Click OK.