If I've enabled Parent Paths (PP) in IIS, but have installed the URL Filter
and disallowed ".." and "../" within links, am I covered from the
vulnerabilities of PP's?
This allows me to use PP's in #Include statements, but doesn't allow
visitors to use PP's in their links to access directories on my server.
Is this correct?
i have a form that pops up based on a click. the popup opens up correctly.
now what i want it to do is this.
1. submit the data to an asp page. that part i got working
2. close the popup box. have that working as well.
3. after processing the data on the asp page, direct to and refresh the
parent page that the popup was created from.
to be more specific....
i have a bracket page, where you click on the winners name to move them
over. works fine. that sends variables to a pop up box, where you enter a
score. that works fine. now when i submit, it only sneds the data to the asp
page, and even though the bottom of the asp page redirects it to the parent
page, it doesn't. it seems like it is trying to redirect to the popup that
doesn't exist anymore, so it does nothing.
I had a database driven website running on a free host,i have now changed host and am having problems setting the db path.
the old host was with somee.com and my website was Kartsearch.this was the path that worked
Source=d:DZHostsLocalUserkartsearchkartsearch instantads.mdb
my new host is 100 webspace(http://freeunixhost.com)My details are sugster & the root folder is sugster.freeunixhost.com, there is a folder called ads where the db is located.i have tried many paths which i thought would work but to no avail.
I am trying to solve a problem on a production server, that unfortunately is
not repeatable on our development server. It is for a bank, and the site is
being hosted by a different company.
Anyway the problem is this. There is a directory where a number of pdfs are
stored. Here is the structure.
bank
| |_
| bank2004
| |_
| images
| |_
| pdfs
images
|_
pdfs
The current pdfs we want to access are in the bank/bank2004/images/pdfs/
directory. The old pdfs with the same names but different content are in the
bank/images/pdfs/ dir.
There are three types of pdfs we retrieve. Personal Applications, Business
Applications and Brochures. Our software writes all three types to that
branch of directories fine using pretty much the same methods for each type.
But when our web pages read them back, the 'brochures' type are pulled from
the old bank/images/pdfs directory instead of the current 2004 one. The
appplication pdfs are fine, they are read from the 2004 branch. The code
used to get the applications is virtually identical to the brochure code,
and it all works like clockwork on the dev box with exactly the same setup,
so it cant be the code.
I'm guessing it's some kind of directory mapping or someting on the iis
server, but I dont have access to the configuration of this server. There
are quick fixes to this problem, such as putting all our new pdf brochures
into the old directory, but my boss wants to know why this is happening.
Has anyone had a similar experience who can at least point me the right way.
I have next to no knowlege of iis, but I'm guessing it has to be server
related.
I have written a program which uses a directory structure upto 4 dirs deep.
I reference the include file
<!--#include file="../../includes/main_page_open.asp"-->
main_page_open.asp contains the line
server.execute("../includes/checkPerms.asp")
I get an error saying
Server object error 'ASP 0228 : 80004005'
Server.Execute Error
/ios/includes/main_page_open.asp, line 32 The call to Server.Execute failed while loading the page.
The basis for the error is pretty straight forward - because the file (main_page_open.asp) is being called from a directory, two deep, the file attempting to be executed cant be executed because the system is looking in the wrong directory.
Now, before someone says; change the path; I cant do that because many (about 100) other files reference the same file with no problem.
Our web application is currently using relative paths in various places throughout our code. im working on eliminating this, but not sure of the best way to go about
it. i want to avoid hardcoding the path to make migration easier and more manageable. i thought there is a way to user the request object?? request.servervariables or
something -
I am trying to learn new stuff using asp. That means I am downloading a lot of examples and looking at them. Sometimes thats all I do is look and compare his/her code to my attempt but also sometimes I need to see a working demo. I find I am replacing the path a lot. Is there a faster way to do this.
can Create a txt file with paths in them and use that to get paths from. It would be differant if I was using the pages but I do not evan have a webpage yet just iis setup on my home comp.
Can anyone help me find a solution to quickly working out relative paths to
a folder in the root of my server...
Although it easy when you go - say - two levels down:
.../includes
it becomes increasingly difficult to ball park the folder when you go deeper
and wider down:
.../.../.../includes
....How do you guys get a quick fix on where the hell the folder or file is
and use that path in asp?
Anyone know a useful way of hiding image paths so images on my site cant be directly linked to?
I've seen sites that use <img src="image.asp?/moo/fred/image01.jpg"> (where the path starts from www.domain.com/secretfolder/moo/fred/image01.jpg) but dont know how to set this up.
BTW am on a shared host so dont have the use of base level administration if it makes any difference?
I have developed an application which works correctly when hosted on a server running Windows Server 2003 and IIS. However, I have to present this application to a different company so I want to create a standalone version on my laptop. My laptop is running Windows XP, IIS 5.1 and has SQLServer Server tools installed.This works on the server:
Code:
<!--#include virtual="connection/connOLEDB_Live.asp"-->
However, I have to add the folder name to the path:I know that I could go through my application changing all of the paths but each time I make changes to the pages I would have to go through the application changing the paths again. Can anybody tell me if there is an easy way of configuring my machine to resolve the file paths to include the name of the folder?
i have about 5 files included in all scripts how do i give relative paths to them?
View Replies View RelatedDoes someone have a reasonable method for concealing the paths to data when using ASP to MS Access?
I maintain a website where some data is intended to be released according to date:time. Some visitors like to "jump the release date" and just copy-n-paste the visible short cuts so they can get an early view of the material stored in a MS Access database.
Because I do want to continue using a straightforward naming convention for the various files, I was hoping someone might have information on how they had kept from pre-releasing information in this situation.
I have a standard Header.asp that I want to include in every other page in
my site. Header.asp is located in the root folder, but the calling pages are
in various folders/levels. Since the relative paths specified in header are
subject to change and are based on the relative path of the calling page,
problems arise. (Strangley, using the IFRAME method of including a header
doesn't react the same way.)
The solution I believe lies in using absolute paths in the Header.asp file
using the "virtual" include qualifier. But this assumes your development
directory structure is the same as your production environment. So I guess
that is the answer. Use absolute paths and set up your development directory
structure to be identical to your production.
I got a problem when I uploaded a file with the input tag of type file "<input type=file.." using the FileSystemObject where The page not opens and there is no any respond, but I tried to see if the folder that is already exists xan I see by that object I discovered that it is not exist.
The main problem I put my files in a folder that I dont know its absolute path , just a relative that always not exist.
i have an aspx page. on that page there is a link that open a new popup page. Popup page contain some text fields. user fills that fields and press OK. By clicking OK I append the textbox values in the DataTable, which is already saved in the session
My Problem is that when that popup windows closes by clicking Ok i want to show that new information in datagrid on the parent page(which opened the popup page[window.open]). i have info in the session, but problem is that when i bind datagrid by using the session Datatable on the parent page.
I have a software that has generated a code for me, not sure if I'm allowed to give out names of other companies on here so i won't for now. anyways, the code has worked for a long time on my server just fine. Until I got a new server, same operating system and everything, i just cut and paste everything over from the old server to the new one. But for some reason now one of my sites will not let me use ".." in my code.
<!--include file=../2020applicationsconnections.asp-->
I would just place the "2020applicationsconnections.asp" file in the folder my current file is in, but then that messes up all the the linking that the "2020applicationsconnections.asp" file had in it. So is there any phrase, symbol, ect. that i should use to indicate a parent directory in this code? or is there some setting i need to change on my server that was set up on my old one.
I have one asp file including another asp file in a seperate folder. The file of the parent is in a read only, but the child is in a write and read file. If i run the child alone you can write with it no problems, but if i try to write with it calling it through the parent it tells me that permission are denied.
So my question is: are file permissions inhereted by the child from the parent? Is there any way of getting around this besides moving the parent into the same folder as the child?
I have a page(1) inside a frameset. The frameset opens from another page(2). I want when I change something on page 1(inside the frameset), the page 1 to be reloaded.
View Replies View Relatedi have 2 asp pages. the parent and the child. the parent has has a value doc_id which is null. and a button to open the child window. it has other variables and input fields.
the child window creates the doc_id.
Now heres the problem. I want to close the child window, and send the doc_id(created in the child) to the doc_id(in the parent). and close the child window.
But keep the original variables in the parent id. (e.g if the user entered their name in the parent window, then opened the child window, then created the doc_id, then closed the child window, i want to parent to have the user name, and the new doc_id)
I have a popup from the parent window which allwos the user to add in new location. when the lcoation has been added succesfully. then thewindow closes and the parent gets refreshed. In particular, just the location listbox gets updated with the new value. the location listbox i generated from the database using asp.
View Replies View RelatedHow to use server.mappath() parent folder correctly:
Server.MapPath("../test.asp")
What do I need to do to write the URLs of the two identical iFrames in the textarea of the parent frame? Well, the iFrames are the same asp file, but the three listboxes in each iFrame make their URLs different. The problem is that upon selecting both iFrames listboxes, the 2nd iFrame cancels out the URL of the first iFrame written on the parent's frame.
View Replies View RelatedHow can I access a web.asp code behind class-on from a code behind calss-function in a loaded web usercontrol. A.aspx loads control B.ascx . A's classA.function A displays info to a label on A.aspx .
I want to call classA.functionA from control B's class B.function B so that when I click on a button located on control B, the on click event fires class B function B which then calls class A function A which displays the info.
I have a parent window (default.asp) and on this page I have an IFrame that displays the rest of the menu requests for the site. The url always shows the base url, never other pages because they appear in the IFrame - this is by design.
The content in the IFrame is dynamic and may scroll forever depending on how much data is retrieved from the db. If the user scrolls down the IFrame to view to contents, the top of the default.asp page scrolls with it until it reaches the top of the IFrame.
The problem is that when navigating through the site I can't seem to figure out how to get it to jump to the top of the default.asp page when the page in the IFrame changes. This causes the user to have to scroll up and down throughout the site making it unappealing for navigation reasons.
I know that IIS 6 disables parent paths by default and I see in M@rco's blog that he "hates them with a vengence." The problem with not using them (at least with includes) though, is that your code files cannot be structured in a useful way, otherwise you will not be able to redistribute your code or to move your folders. Code:
View Replies View Relatedis there anyway to get the title of the window that opened a new window? in javascript it would be window.opener.document.title but is it even possible to get that with asp?
View Replies View Relatedi have a popup from the parent window which allwos the user to add in new location. when the lcoation has been added succesfully. then thewindow closes and the parent gets refreshed. In particular, just the location listbox gets updated with the new value. the location listbox i generated from the database using asp.
View Replies View RelatedI have an ASP page form that will be used for data entry. I am redoing a MS-Access Runtime application that has been used for a few years.
One of the issues; "What to do about the conditional visibility code" I had set on several of my Form objects.
What happens is, based on what value the user selects from a drop down box; additional fields would become visible requiring input. What I came up with in ASP was a POP-Up Window.
I got the window working by downloading some code from a tech site and I set up a "Switch” statement to conditionally the POP-Up window's initiation.
I set up users input fields and I tested it and it works fine.
The PROBLEM:
With the Parent window still open, how can I pass the values from the POP-UP back into it for use? I mean without closing the Parent Window and Losing all the data values entered in the previous form fields.
How do I set it up so that when a user submits the Parent window data the POP-Up values go with it? I've have tried the standard POST Method but the Parent can not see the POP-UP window Form Field values.
I have an asp application where in a certain page you have to enter a PO number, if you click the search it will bring up the 15 most previous PO number w/some information.
I want to be able to have those PO Numbers to be links, that when you click them it closes the new window(I have this) and the parent page can grab the PO number clicked and display that in this text field how would I go about this?
I have a screen, screenA, from which I call another screen, screenB, with a form on it. ScreenA has an ID that is captured in a variable called strShortName. (That variable is defined in another file called into ScreenA via an include.) I want to write that name as the value in a hidden field in the form on screenB. How can I do that?
View Replies View RelatedI am trying to redirect back to a child form after a submit with a file upload and verification of file data. I would like to go back to the form and display a message returning the status of the data. Is that possible? Any suggestions on an alternate? I am using classic ASP, javascript and vbscript.
View Replies View RelatedI have some asp files that are included in each of the (asp) pages of a new website I have built.I have many pages in the website, in many directories (3 levels).
The administrator does not alow to use parent path, and this is problematic to me now.
Any change of location of the included files, will not prevent from using parent path to access them.What can I do?I can not use one directory for all paes.
i have several errors when i want to include a file in my asp codes using "include file" object. i am using windows server 2003 and IIS6. have can i solve this problem?
The error description is like this....
Active Server Pages error 'ASP 0131'
Disallowed Parent Path
The Include file '../adovbs.inc' cannot contain '..' to indicate the parent directory.