How can I set Plesk settings for a virtual directory?

I have a an iis 7 website at godaddy under the old hosting manager system which allows me to include a file in a page using the following:   <!--#include file="../includes/linked-filename.asp"-->

I'm moving the site to a new plesk site and encounter a server error when a page references the linked-filename.
The server error only occurs when I need to go up the chain to the linked directory (i.e., ../includes/...).
If the included/linked file is in the current directory or a subdirectory (i.e., <!--#include file="includes/linked-filename.asp"--> or members/includes/linked-filename), there is no error.

It would be inconvenient to need a separate file for each subdirectory. If i changed a DB password that would mean changing every file.

I'm not sure how to set the plesk virtual directory settings and the plesk help didn't help me as much as i had hoped.

Thanks for any help you can provide.

Sally
sallywizardAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Big MontyWeb Ninja at largeCommented:
it looks like you're using parent paths in your code, which is a security risk and is disabled by default in the newer versions of IIS, and is probably disabled by default in PLESK. it is better to get in the habit of using absolute paths, however if that's not an option to you right now, you may be able to turn them on (remember, PLESK is just a admin tool that sits on IIS so it should have all the features IIS has.I believe the option for Parent Paths lie under the Virtual Directory settings, it's a checkbox that says "Enable Parent Paths"

see this link for more info on parent paths:
http://windowsitpro.com/systems-management/benefits-and-pitfalls-disabling-parent-paths
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
sallywizardAuthor Commented:
I understand, now, the security issue. Based on the article and the comments, there doesn't seem to be an easy route.
 
I checked the enable parent path but either it takes a while to be effective or checking it didn't accomplish the task. I set the permissions for the specific directory to read and execute but that appears to have not had an impact.

I also tried referencing the live site by file="http://domain/includes" but that didn't work. Do i need to us a file directory such as "D:\..."? That could be problematic when i port to a live site.

The solution appears to be to move the site's pages, currently in subdirectories by topic to the top web level and reference a subdirectory to all pages that call the file. that's a crowded folder when the site has many pages.

I'm considering moving my development site - that visitors access to see how their sites will appear when they're copied to their hosting. In some older sites, this would mean a bit of rework just to port them to the plesk hosting. Something to think about.

Thanks,
Sally
0
Big MontyWeb Ninja at largeCommented:
you may need to restart iis in order for the changes to take place, cant remember off the top of my head.

you do NOT need to reference by drive letter, just need to start the path with a "/".

what's the exact error message you're getting?
0
10 Tips to Protect Your Business from Ransomware

Did you know that ransomware is the most widespread, destructive malware in the world today? It accounts for 39% of all security breaches, with ransomware gangsters projected to make $11.5B in profits from online extortion by 2019.

sallywizardAuthor Commented:
it's a generic "internal Server Error".  
The server encountered an internal error or misconfiguration and was unable to complete your request.
...
More information about this error may be available in the server error log.

I've started looking at logs but determined the fail point by creating simple test pages.

I see that I can create custom redirects for different messages and think I'll try that This is my first time using plesk with older sites. i've set up some new ones including databases but my calls to the include directories are all subdirectories.

Do you recommend i call godaddy and ask them to restart iis? i have no problems doing that-just wait time. Plesk has a robust control panel but i'm just getting to know it.

Thanks. I'm awarding you the points.
0
Big MontyWeb Ninja at largeCommented:
it may be worth calling them, although I'm not confident they would restart it for you...

to get more detailed errors, make sure you have the following in your web.config file, which should be located in the root folder of your site
0
Big MontyWeb Ninja at largeCommented:
forgot to put in the web.config file :)

<system.web>
    <customErrors mode="Off" />
  ...
  </system.web>

Open in new window

0
Scott Fell, EE MVEDeveloper & EE ModeratorCommented:
>I understand, now, the security issue. Based on the article and the comments, there doesn't seem to be an easy route.

The answer given and selected only explains why you are getting the error and why you should not enable parent paths. The is the actual solution is very easy.  Simply change any reference of the include file to include virtual

FROM
 <!--#include file="../includes/linked-filename.asp"-->

Open in new window

TO
 <!--#include virtual="/includes/linked-filename.asp"-->

Open in new window


assuming the includes folder is top level.
0
sallywizardAuthor Commented:
Scott,
Thanks for the recommendation. This solution works.   I have a bit of work to do to transfer folders but I know now how to set everything up.

How can i add points that I can award you?

Thanks,
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Microsoft IIS Web Server

From novice to tech pro — start learning today.