Cannot use a leading .. to exit above the top directory > Product Forums

Unanswered Active Topics

Forums Search Members

Subject: Cannot use a leading .. to exit above the top directory

You are not authorized to post a reply.

Author

Messages

Gold Membership

Nuke Wiz
Posts:138

10/05/2006 3:03 PM
Hi Scott, I've just seen one of these errors, it has only happened once that I can see. Is there any other info that might help debug? Or is it user error? AssemblyVersion: 04.03.05 PortalID: -1 PortalName: UserID: -1 UserName: ActiveTabID: -1 ActiveTabName: RawURL: /Default.aspx?tabid=36&error=Cannot+use+a+leading+..+to+exit+above+the+top+directory.&content=0 AbsoluteURL: /Default.aspx AbsoluteURLReferrer: UserAgent: Mozilla/5.0 (compatible; Yahoo! Slurp; http://help.yahoo.com/help/us/ysearch/slurp) DefaultDataProvider: DotNetNuke.Data.SqlDataProvider, DotNetNuke.SqlDataProvider ExceptionGUID: bfcfffa9-302e-4bfb-84a1-b8a52f658396 InnerException: Unhandled Error: FileName: FileLineNumber: 0 FileColumnNumber: 0 Method: DotNetNuke.HttpModules.UrlRewriteModule.SecurityCheck StackTrace: Message: System.Exception: Unhandled Error: ---> System.Web.HttpException: Not Found at DotNetNuke.HttpModules.UrlRewriteModule.SecurityCheck(HttpApplication app) at DotNetNuke.HttpModules.UrlRewriteModule.OnBeginRequest(Object s, EventArgs e) at System.Web.HttpApplication.SyncEventExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute() at System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously) --- End of inner exception stack trace --- Source: Server Name: INETC528

Scott McCulloch User is Offline

Administrators

Nuke Master
Posts:12820

10/05/2006 5:03 PM
With the core and the provider on this site, one of the security checks is to check for the "../" sequence, if it is found, throw an exception. There must be a bad link somewhere on your site that does this.

Scott McCulloch Site Administrator

Mariette Knap User is Offline

Registered Users

Nuke Master
Posts:650

10/05/2006 11:54 PM
Check you web.config for: <authentication mode="Forms"> <forms name=".SMALLBIZ" protection="All" timeout="7200" cookieless="UseCookies" slidingExpiration="true" /> authentication> make sure it has set cookieless="UseCookies"

Mariëtte Knap www.smallbizserver.net

You are not authorized to post a reply.

Forums > Projects > Friendly Urls > Cannot use a leading .. to exit above the top directory