IIS 6 + ASP + /./../ problem

I have a feeling there isn't an easy answer to this problem but here it goes.

I need to migrate a couple classic ASP aps from a win2k/IIS5 server to a win2003/IIS6 server. The apps use "/./../" all over the place to reference paths for graphics, include files, and redirect urls. Unfortunately IIS6 throws a 403 (Forbidden) error. If I manually take out the /./../ things work ok, but these apps are hundreds of pages, which would amount to a testing nightmare. I have tried enabling "Parent Paths" in IIS, but that does not seem to do the trick.

Any Ideas??

A little more info. If I turn off friendly error messages in IE, it's 403 Forbidden(Invalid URL).

Using firebird/firefox works fine - it seems to throw away the /./../ in any urls in this situation.

Another thing that throws a "forbidden" error is when there is no default document in a directory and you don't have permissions to browse the directory contents. Perhaps you need to tweak the default document(s) for your website.

IIS 6.0 has parent folders disabled by default. You might try enabling them.
To do this go to the properties of your site in IIS, click on the Home Directory tab
then click the Configuration button. Go to the Options tab on the form that comes
up and check the "Enable Parent Paths" box.

Hope this helps.

hi,
Currently, I am facing the same problem as Dauger when i transfer my asp files from Win2k to Win Server 2003. My web page can be up and linking to other pages are fine, however, when I click those links that will pop up a screen, the pop up screen show "Forbidden (Invalid URL)".

I already enable the parent path in IIS but things still don't work. What shuold I do to solve this problem.

Thanks for the help.

yyh

Do you have a default document in the web? Like default.asp or whatever?

Hi Doug G,

Thanks for the reply....

Yes, i have the default document
the code is as below:

<%@ Language=VBScript %>
<% Option Explicit %>
<% Response.Redirect "General/asp/LoadConst.asp" %>
<% 'Response.Redirect "Main.asp" %>

yyh

Try just a simple one-line default page & see if it works, something like

<% response.write "asp is working, yippee!" %>

Hi Doug G,

I had tried the line of code given but still not work.. Actually what is the use of default.asp? I am a new learner in ASP and IIS because this code is not written by me either.

yyh

If you open the properties of your IIS web in the IIS service manager MMC, look at the Documents tab, that is where you set "default documents"

These are the document names that IIS will try to open if you call a url without specifying a filename, like in http://localhost from your browser. IIS will look for a default document filename that matches one of the default documents specified for your server. So if default.asp was the 1st default document name, IIS would try to open http://localhost/default.asp if it existed even though you only entered http://localhost in your browser address.

Hi Dough G,

Thanks for the information given. I had found the problem, there is a variable declared in the Javascript that hold the value "/.." which will make the URL of the pop up screen to look like http://localhost/../abc/def.asp . After I deleted this variable then everything goes back normal.

Anyway, thanks a lot for the help....I really learned something from it.

Have a nice weekend.

yyh