How can I set Plesk settings for a virtual directory?

Posted on 2014-10-24
Last Modified: 2014-10-27
I have a an iis 7 website at godaddy under the old hosting manager system which allows me to include a file in a page using the following:   <!--#include file="../includes/linked-filename.asp"-->

I'm moving the site to a new plesk site and encounter a server error when a page references the linked-filename.
The server error only occurs when I need to go up the chain to the linked directory (i.e., ../includes/...).
If the included/linked file is in the current directory or a subdirectory (i.e., <!--#include file="includes/linked-filename.asp"--> or members/includes/linked-filename), there is no error.

It would be inconvenient to need a separate file for each subdirectory. If i changed a DB password that would mean changing every file.

I'm not sure how to set the plesk virtual directory settings and the plesk help didn't help me as much as i had hoped.

Thanks for any help you can provide.

Question by:sallywizard
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 3
LVL 33

Accepted Solution

Big Monty earned 500 total points
ID: 40402722
it looks like you're using parent paths in your code, which is a security risk and is disabled by default in the newer versions of IIS, and is probably disabled by default in PLESK. it is better to get in the habit of using absolute paths, however if that's not an option to you right now, you may be able to turn them on (remember, PLESK is just a admin tool that sits on IIS so it should have all the features IIS has.I believe the option for Parent Paths lie under the Virtual Directory settings, it's a checkbox that says "Enable Parent Paths"

see this link for more info on parent paths:

Author Comment

ID: 40402832
I understand, now, the security issue. Based on the article and the comments, there doesn't seem to be an easy route.
I checked the enable parent path but either it takes a while to be effective or checking it didn't accomplish the task. I set the permissions for the specific directory to read and execute but that appears to have not had an impact.

I also tried referencing the live site by file="http://domain/includes" but that didn't work. Do i need to us a file directory such as "D:\..."? That could be problematic when i port to a live site.

The solution appears to be to move the site's pages, currently in subdirectories by topic to the top web level and reference a subdirectory to all pages that call the file. that's a crowded folder when the site has many pages.

I'm considering moving my development site - that visitors access to see how their sites will appear when they're copied to their hosting. In some older sites, this would mean a bit of rework just to port them to the plesk hosting. Something to think about.

LVL 33

Expert Comment

by:Big Monty
ID: 40402843
you may need to restart iis in order for the changes to take place, cant remember off the top of my head.

you do NOT need to reference by drive letter, just need to start the path with a "/".

what's the exact error message you're getting?
What is a Denial of Service (DoS)?

A DoS is a malicious attempt to prevent the normal operation of a computer system. You may frequently see the terms 'DDoS' (Distributed Denial of Service) and 'DoS' used interchangeably, but there are some subtle differences.


Author Comment

ID: 40403022
it's a generic "internal Server Error".  
The server encountered an internal error or misconfiguration and was unable to complete your request.
More information about this error may be available in the server error log.

I've started looking at logs but determined the fail point by creating simple test pages.

I see that I can create custom redirects for different messages and think I'll try that This is my first time using plesk with older sites. i've set up some new ones including databases but my calls to the include directories are all subdirectories.

Do you recommend i call godaddy and ask them to restart iis? i have no problems doing that-just wait time. Plesk has a robust control panel but i'm just getting to know it.

Thanks. I'm awarding you the points.
LVL 33

Expert Comment

by:Big Monty
ID: 40403030
it may be worth calling them, although I'm not confident they would restart it for you...

to get more detailed errors, make sure you have the following in your web.config file, which should be located in the root folder of your site
LVL 33

Expert Comment

by:Big Monty
ID: 40403034
forgot to put in the web.config file :)

    <customErrors mode="Off" />

Open in new window

LVL 53

Expert Comment

by:Scott Fell, EE MVE
ID: 40403426
>I understand, now, the security issue. Based on the article and the comments, there doesn't seem to be an easy route.

The answer given and selected only explains why you are getting the error and why you should not enable parent paths. The is the actual solution is very easy.  Simply change any reference of the include file to include virtual

 <!--#include file="../includes/linked-filename.asp"-->

Open in new window

 <!--#include virtual="/includes/linked-filename.asp"-->

Open in new window

assuming the includes folder is top level.

Author Comment

ID: 40406657
Thanks for the recommendation. This solution works.   I have a bit of work to do to transfer folders but I know now how to set everything up.

How can i add points that I can award you?


Featured Post

Salesforce Has Never Been Easier

Improve and reinforce salesforce training & adoption using WalkMe's digital adoption platform. Start saving on costly employee training by creating fast intuitive Walk-Thrus for Salesforce. Claim your Free Account Now

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A phishing scam that claims a recipient’s credit card details have been “suspended” is the latest trend in spoof emails.
Q&A with Course Creator, Mark Lassoff, on the importance of HTML5 in the career of a modern-day developer.
Explain concepts important to validation of email addresses with regular expressions. Applies to most languages/tools that uses regular expressions. Consider email address RFCs: Look at HTML5 form input element (with type=email) regex pattern: T…
Learn how to create flexible layouts using relative units in CSS.  New relative units added in CSS3 include vw(viewports width), vh(viewports height), vmin(minimum of viewports height and width), and vmax (maximum of viewports height and width).

628 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question