Active Server Pages error 'ASP 0131' Disallowed Parent Path

zxytes

Guppy
Active Server Pages error 'ASP 0131'

Disallowed Parent Path

The Include file '../include/...........'cannot contain '..' to indicate the parent directory.

domain host glassonchina.com

please help!

zxytes
 
We need to enable parent path for you. Please send an email to support with your account ID.
 
zxytes said:
Active Server Pages error 'ASP 0131'

Disallowed Parent Path

The Include file '../include/...........'cannot contain '..' to indicate the parent directory.

domain host glassonchina.com

please help!

zxytes


Hi,

Change


<!-- #INCLUDE FILE="../include/utils.runtime5.asp" -->
<!-- #INCLUDE FILE="../include/ado.runtime5.asp" -->

to


<!-- #INCLUDE VIRTUAL="/virtual_path/config/include/utils.runtime5.asp" -->
<!-- #INCLUDE VIRTUAL="/virtual_path/config/include/ado.runtime5.asp" -->

For any help mail me.

Regards,

populate
 
Hi
I am getting following error

Active Server Pages error 'ASP 0131'
Disallowed Parent Path
The Include file '../stimeout.asp' cannot contain '..' to indicate the parent directory.

Pls help ...code is like

<HTML>
<HEAD>
<title>Faculty Personnel Record - Teaching and Curriculum Development</title>
<link rel="stylesheet" type="text/css" href="../menunav.css">
<style type="text/css">
BODY {font-family:Verdana;font-size:12}
TABLE {font-family:Verdana;font-size:12}
</style>

<SCRIPT LANGUAGE="JavaScript">
function validate_form()
{
x=document.form
submitOK="True"
var leave_value = ""

for (i = 0;i < x.leave.length;i++)
{
if (x.leave.checked)
{
leave_value = x.leave.value;
break;
}
}

//if (x.leave.options[x.leave.selectedIndex].value == "Yes")
if (leave_value == "Yes")
{
if ((x.cno1.value != "") || (x.title1.value != "") || (x.callno1.value != "") || (x.sit1.value != ""))
{
alert("Leave field is chosen as Yes!")
submitOK="False"
}
}
else
{
if(x.cno1.value == "")
{
alert("You must enter a course number!")
submitOK="False"
}
else
{
str = x.cno1.value;
var i;
var ok = "";
for (i = 0; i < str.length; i++)
{
var c = str.charAt(i);
if ((c == "\"")||(c == "\+")||(c == "*"))
{
ok = "no"
x.cno1.focus();
x.cno1.select();
submitOK="False"
}
}
if (ok == "no")
alert("Special charachters are not accepted!")
}
if(x.title1.value == "")
{
alert("You must enter the course title!")
submitOK="False"
}
if(x.callno1.value == "")
{
alert("You must enter the appropriate call number!")
submitOK="False"
}
if((x.no_stud1.value == "") || (isNaN(x.no_stud1.value)))
{
alert("You must enter the number of students in the section in numbers!")
submitOK="False"
}
if((x.sit1.value != "") && (isNaN(x.sit1.value)))
{
alert("SIT score should be in numbers!")
submitOK="False"
}
}
if (submitOK=="False")
{return false}
else
{
var answer=confirm("Do you want to add this course?")
if(!answer)
{return false}
}
}

function teaching_edit()
{
var answer=confirm("Do you want to edit this course?")
if(answer)
{
//alert(document.form.hvar.value);
//id = escape(id);
//document.form.hvar.value = "hello"
document.form.action="teaching_edit.asp"
document.form.submit()
}
}

function teaching_add(id)
{
var answer=confirm("Do you want to delete this record?")
if(answer)
{
document.form.action="teaching_add.asp"
document.form.submit()
}
}
</SCRIPT>
</HEAD>

<%
'To check if timeout set in global.asa is working or not
'response.write("Timeout is now: " & Session.Timeout)
Dim FID
FID = Session("Faculty_ID")
if FID = "" then
%>
<!--#include file = ../stimeout.asp-->
<%else%>
<!--#include file = getconnection.asp-->

<%
acad_year = Session("acad_year")

'For semesters - seperating the years
Dim year1, year2, len_opt, arr_opt()
len_opt = 0
len_opt = len(acad_year)
ReDim arr_opt(len_opt)

'Copy the value in option into a character array
For i = 1 to len_opt
arr_opt(i) = Mid(acad_year,i,1)
Next

'Check for '*' sign and copy start date alone into variable start_date
For ch1 = 1 to len_opt
if arr_opt(ch1) <> "-" then
year1 = year1 & arr_opt(ch1)
else
ch1 = ch1 + 1
Exit For
end if
Next

'Copy the year2 into the variable year2
For ch2 = ch1 to len_opt
year2 = year2 & arr_opt(ch2)
Next

query = "SELECT COUNT(*) AS TOTAL FROM COURSE_FACULTY WHERE Faculty_ID="&FID&" and Acad_Year = '"&acad_year&"'"
Set rs = dbc.Execute(query)
rs.movefirst 'Definitely there will be a rs with either zero or >zero correspondingly so no need to chk
do while not rs.eof
flag = rs("TOTAL")
rs.movenext
loop
Set rs=Nothing

setdbErrMsg = Request.QueryString("err")
%>


<BODY bgcolor="#ffffff" text="#000000">
<!--#include file = teaching_banner.htm-->

<td width="80%">
<FORM method="post" action="teaching_add.asp" name=form onSubmit="return validate_form()">
<%'<FORM method="post" name="form" onSubmit="return validate_form()">%>
<table align=left cellpadding=0 cellspacing="6" border=0>
<tr>
<td colspan="2"><b><u>I.TEACHING AND CURRICULUM DEVELOPMENT</u></b></td>
</tr>
<tr>
<td colspan="2">&nbsp;</td>
</tr>
<tr>
<td colspan="2">
<div align="left"><b>A 1. Teaching: Spring, Summer and Fall Semesters</b>
</div>
</td>
</tr>
<tr>
<!--td colspan="2" align="center"> <b><font color = "red">
<%
if setdbErrMsg = "err_teaching" then
Response.write(Session("dbErrMsg"))
Session("dbErrMsg")=""
end if
%>
</font></b> </td>
</tr-->
<%
if flag <> 0 then
query = "SELECT * FROM COURSE_FACULTY WHERE Faculty_ID="&FID&" and Acad_Year = '"&acad_year&"' ORDER BY Semester_Name"
Set rs = dbc.Execute(query)
rs.movefirst
%>
<input type="hidden" name="hvar">
<tr>
<td colspan="2">
<div align="center">
<table width="95%" cellpadding=2 cellspacing=2 border=1>
<tr>
<td width="121" >
<div align="center">Option</div>
</td>
<td width="77" >
<div align="center">Semester</div>
</td>
<td width="59" >
<div align="center">Leave</div>
</td>
<td width="65" >
<div align="center">Course No.</div>
</td>
<td width="57" >
<div align="center">Call No.</div>
</td>
<td width="164" >
<div align="center">Course Title</div>
</td>
<td width="95" >
<div align="center">Census Day Enrlmt</div>
</td>
<td width="85" >
<div align="center">Course Taught</div>
</td>
<td width="80" >
<div align="center"> Eval Admin</div>
</td>
<td width="108" >
<div align="center">Evaluation Score**</div>
</td>
</tr>
<%
do while not rs.eof
%>
<tr>
<td width="121" >
<input type="radio" name="option" value="<%=rs("Semester_Name")%>*<%=rs("Course_No")%>*<%=rs("Call_Num")%>" onClick="hvar.value = this.value; teaching_edit()">Edit<br>
<input type="radio" name="option" value="<%=rs("Semester_Name")%>*<%=rs("Course_No")%>*<%=rs("Call_Num")%>" onClick="hvar.value = this.value; teaching_add()">Delete
</td>
<td width="77" ><%=rs("Semester_Name")%></td>
<td width="59" ><%=rs("Sabbatical_Leave")%></td>
<td width="65" ><%=rs("Course_No")%></td>
<td width="57" ><%=rs("Call_Num")%></td>
<td width="164" ><%=rs("Course_Name")%></td>
<td width="95" ><%=rs("No_Of_Students")%></td>
<td width="85" ><%=rs("Load")%></td>
<td width="80" ><%=rs("Eval")%></td>
<td width="108" ><%=rs("SIT_Score")%></td>
</tr>
<%
rs.movenext
loop
%>
</table>
</div>
</td>
</tr>
<tr>
<td colspan ="2">&nbsp;</td>
</tr>
<%
end if
Set rs = Nothing
%>
<tr>
<td colspan ="2">
<div align="center"><B><u>Add Courses</u></B> </div>
</td>
</tr>
<tr>
<td width=50% height="24">
<div align="right">Semester*: </div>
</td>
<td width="50%" height="24">
<select name="sem_name">
<option value="Spring <%=year2%>">Spring
<%=year2%></option>
<option value="Summer <%=year2%>">Summer
<%=year2%></option>
<option value="Fall <%=year2%>">Fall
<%=year2%></option>
</select>
</td>
</tr>
<tr>
<td width=50% height="25">
<div align="right"><img src="../images/required_field.gif" width="13" height="10" align="texttop">On Leave?*: </div>
</td>
<td width="50%" height="25">
<input type="radio" name="leave" value="No" checked>No
&nbsp;&nbsp;<input type="radio" name="leave" value="Yes">Yes
</td>
</tr>
<tr>
<td width=50%>
<div align="right">Course Number*: </div>
</td>
<td width="50%">
<input type="text" name="cno1">
</td>
</tr>
<tr>
<td width=50%>
<div align="right">Descriptive Title*: </div>
</td>
<td width="50%">
<input type="text" name="title1" size="50">
</td>
</tr>
<tr>
<td width=50%>
<div align="right">Call Number*: </div>
</td>
<td width="50%">
<input type="text" name="callno1" maxlength="10" size="10">
</td>
</tr>
<tr>
<td width=50%>
<div align="right">Census Day Enrollment*: </div>
</td>
<td width="50%">
<input type="text" name="no_stud1" size="10">
</td>
</tr>
<tr>
<td width=50%>
<div align="right">Course Taught*: </div>
</td>
<td width="50%">
<input type="radio" name="load" value="onload" checked>Onload
&nbsp;&nbsp;<input type="radio" name="load" value="offload">Offload</td>
</tr>
<tr>
<td width=50%>
<div align="right">Course Evaluation Administered*: </div>
</td>
<td width="50%"><input type="radio" name="evaln" value="Yes" checked>Yes
&nbsp;&nbsp;<input type="radio" name="evaln" value="No">No</td>
</tr>
<tr>
<td width=50% height="22">
<div align="right"><img src="../images/required_field.gif" width="13" height="10" align="texttop"><img src="../images/required_field.gif" width="13" height="10" align="texttop">SIT
Score Qn 29/Contract MBA Qn 6: </div>
</td>
<td width="50%">
<input type="text" name="sit1" size="10">
</td>
</tr>
<tr>
<td colspan="2">&nbsp;</td>
</tr>
<tr>
<td colspan="2">
<p align = "left"> <img src="../images/required_field.gif" width="13" height="10" align="texttop">Indicate any periods of sabbatical leave, leave without
pay, other leaves, or grant-funded released time.
<p> <img src="../images/required_field.gif" width="13" height="10" align="texttop"><img src="../images/required_field.gif" width="13" height="10" align="texttop">SIT Score Qn 29/Contract MBA Qn 6: Compared to other instructors you have had at UIC this
instructor was ...<br>
(5 = Excellent, 4 = Good, 3 = Average, 2 = Poor, 1 = Very Poor)
</td>
</tr>
<tr>
<td colspan="2">&nbsp;</td>
</tr>
<tr>
<td colspan="2">
<center>
<input type="Image" src="../images/submit.gif" name="Add Course">
&nbsp;&nbsp;
<a onclick="document.form.reset();return false;"href="#"><img alt="Clear" src="../images/clear.gif" border="0"></a>
&nbsp;&nbsp;
<a href= "teaching_comments.asp" target=""><img src="../images/continue.gif" border="0"></a>
</center>
</td>
</tr>
<tr>
<td colspan="2">&nbsp;</td>
</tr>
<tr>
<td colspan="2"><!--#include file = ../footer.htm--></td>
</tr>
</table>
</FORM>
</td>
</tr>
</table>

</BODY>
</HTML>
<!--#include file = closeconnection.asp-->
<%end if%>
 
I take it you aren't a customer here, as we have parent paths enabled all the time.

However to enable parent paths, go to your IIS Manager(from control panel), right click your domain in the list of services, go to properties, then Home Directory, go to configuration button near the bottom, click App Option, and check Enable Parent Paths, OK out and you are done.
 
Back
Top