FrontPage Database Interface Wizard

[Bob]

I used the database interface wizard to create table editing on my Access
database. The use of an existing connection was enabled and verified.
However, after I published to the site, I got the following error The Include
file '../../../_fpclass/fpdblib.inc' cannot contain '..' to indicate the
parent directory.

Any ideas on how to fix this problem?

 

[Ronx]

The server must be configured to allow Parent Paths - ask your host to
do this unless you have access to the server.

 

[Bob]

My server host has given me the following information

The Parent Paths option will permit you to use ".." in calls to
functions/files by allowing paths that are relative to the current directory
using the ..\notation

Setting this property to True may constitute a security risk because an
include path can access critical or confidential files outside the root
directory of your application

This doesn't sound good. Is there any other way to deal with the problem?

 

[Bob]

My server host suggested that I use absolute links in order to avoid the
potential security issue with the parent path. How would I set this up so
that the database interface wizard would use absolute links rather than the
parent path?

 

[Ronx]

The database wizards cannot be set up to use absolute paths - they will
always use relative paths which requires the server to allow parent
paths.

If the host will not change this setting in IIS you will have to write
your own form handlers using asp or asp.net (or whatever other server
side scripting your host supports).
--
Ron Symonds - Microsoft MVP (FrontPage)
Reply only to group - emails will be deleted unread.
FrontPage Support: http://www.frontpagemvps.com/
http://www.rxs-enterprises.org/fp

 

[Thomas A. Rowe]

The only time there is a security issue with the use of Parent Paths, is when a web host actually
host web sites on the C (boot) drive of the server.

--
==============================================
Thomas A. Rowe
Microsoft MVP - FrontPage

http://www.Ecom-Data.com
==============================================