having problems with virtual paths

[Floodster]

HI,
I have a site set up in DWMX with the following settings;
Local Root=H:\Research\Projects\Website\
Remote Info
Access=Local/Network
Remote Folder=C:\Inetpub\

http://wwwroot\Research\

Testing Server
Server Model=ASP/VBSCRIPT
Access=Local/Network
Testing Server Folder=C:\Inetpub\

http://wwwroot\Research\

URL Prefix=

http://localhost/wwwroot/research/

Now in my pages I have some include files which were orignally like this;

<!--#include file="../includes/includes.asp"-->

but I have since found that this isn't properly supported on live web servers & that using virtual paths is the correct way. So i changed it to;

<!--#include virtual="/includes/includes.asp"-->

My problem is that when running the pages on the test server it is looking for;

[URL unfurl="true"]http://localhost/includes/includes.asp[/URL]

instead of;

[URL unfurl="true"]http://localhost/research/includes/includes.asp[/URL]

Any ideas why this is happening & how I can fix it??
Thanks.

 

[dodge20]

Have your hosting company enable parent paths. That should take care of it.

Dodge20

 

[Floodster]

Dodge,
I was going to do that but other threads recommend you use virtual paths as this is the correct way??

thanks.

 

[dodge20]

There is a bit of a security risk with parent paths described below. I do not have a problem using parent paths. If you do, use virtual paths.

The security risk of parent paths is that intruders can upload and run a script to move up the folder tree. When the script reaches the root, it can move down from there into known folders that might have elevated privileges (e.g., C:\

http://wwwroot\inetpub\scripts,

which has Everyone Full Control permission by default, or C:\winnt\system32).

Dodge20

 

[dodge20]

Sorry so to answer your original question

<!--#include virtual="/research/includes/includes.asp"-->

Dodge20

 

[Floodster]

cheers dodge, I'll give it a go.