AspEnableParentPaths Metabase Property (IIS 6.0)
The AspEnableParentPaths property specifies whether an ASP page allows paths relative to the current directory (using the ..\ notation). If set to true, this property constitutes a potential security risk, because an include path could access critical or confidential files outside the root directory of the application.
| Attribute Name | Attribute Value |
XML Data Type | Boolean |
WMI Data Type | Boolean |
ADSI Data Type | Boolean |
ABO Data Type | Boolean |
ABO Metabase Identifier | MD_ASP_ENABLEPARENTPATHS |
Attributes | INHERIT |
Default Value | false |
MetaFlagsEx | CACHE_PROPERTY_MODIFIED |
User Type | SP_MD_UT_APP |
ID | 7008 |
Configurable Locations
You can configure this property at the following locations in the IIS metabase.
| Metabase Path | IIS Admin Object Type |
/LM/W3SVC/n/ROOT /LM/W3SVC/n/ROOT/virtual_directory_name | IIsWebVirtualDir |
/LM/W3SVC/n | IIsWebServer |
/LM/W3SVC | IIsWebService |
/LM/W3SVC/n/ROOT/physical_directory_name /LM/W3SVC/n/virtual_directory_name/physical_directory_name | IIsWebDirectory |
Code Example
For general code examples, see Code Examples to Configure Metabase Properties.