Results 1 to 7 of 7
Thread: IIS Parent directory browsing
-
08-03-2005, 04:34 PM #1Web Hosting Master
- Join Date
- Jul 2005
- Posts
- 598
IIS Parent directory browsing
MS has disabled Parent directory browsing by default in IIS which means users cannot use "../" to indicate parent directory or going upper directory. Any solution on this problem beside enabling Parent Directory Browsing?
I'm using ServerMapPath and include function.
-
08-04-2005, 09:56 AM #2Disabled
- Join Date
- Feb 2005
- Location
- Galveston, TX USA
- Posts
- 115
There is no better way to deal with it. Here are the work-around.
1) For ASP code, you can define a global variable (Const strDefaultPath = "/MyDefaultFolder"). So you can use strDefaultPath & "/SubFolder1" instead of "../SubFolder1". When you move the site to another folder or server, you only need change this variable. You can also put this variable in the configuration file (web.config) if you like.
2) For #Include directive, there is no other way (#inlcude directive cannot use variable). You always need to use absolute path ("/MyDefaultFolder/Include/...").
Please share your ideas if you find a better one.
-
08-07-2005, 07:41 PM #3Web Hosting Master
- Join Date
- Jul 2005
- Posts
- 598
Thanks for the help. Any other options available?
-
08-08-2005, 03:49 AM #4Disabled
- Join Date
- Jan 2005
- Posts
- 183
HI,
Do you have direct access to your IIS Server?
You can always enable this option by login to IIS > Your Website > Properties.
You will find multiple tabs there. In a particular tab you can enable the parent directory browsing for your website.
If you don't have direct access to your website, you can request your web hosting company to perform this task.
-
08-09-2005, 03:36 AM #5Web Hosting Master
- Join Date
- Jul 2005
- Posts
- 598
I have access to the server. As this is a shared hosting server, enabling the Parent Path would invite security problem on the server. This is the main reason MS disabled this option by default on IIS6.
-
08-09-2005, 12:03 PM #6Disabled
- Join Date
- Jan 2005
- Posts
- 183
Hi Tomactf14,
I think that you can enable this option on domain by domain basis.
Did you tried that enabling for your domain name?
-
08-09-2005, 10:28 PM #7Web Hosting Master
- Join Date
- Jul 2005
- Posts
- 598
The function could work once i enable the Parent Path. The only thing that i am concern would be the security. From what i know, this would expose the server to breakin. Any programmer could verify this?