Microsoft KB Archive/272662

= How to Create a Directory Viewer By Using ASP =

Article ID: 272662

Article Last Modified on 11/21/2006

-

APPLIES TO


 * Microsoft Internet Information Server 4.0
 * Microsoft Internet Information Services 5.0

-



This article was previously published under Q272662



We strongly recommend that all users upgrade to Microsoft Internet Information Services (IIS) version 6.0 running on Microsoft Windows Server 2003. IIS 6.0 significantly increases Web infrastructure security. For more information about IIS security-related topics, visit the following Microsoft Web site:

http://www.microsoft.com/technet/security/prodtech/IIS.mspx



SUMMARY
This article describes how to create a sample page by using Microsoft Active Server Pages (ASP) technologies to display a generic directory viewer with Scripting.FileSystemObject.

Important Note
If you use the code in this article improperly, the code can be used to view folders outside of a Web site. For additional information on preventing this, click the article numbers below to view the articles in the Microsoft Knowledge Base:

184717 AspEnableParentPaths MetaBase Property Should Be Set To False

276548 ASP Error 0131 When Browsing to Database Results Region ASP Page



General Disclaimer
Microsoft provides programming examples for illustration only, without warranty either expressed or implied. This includes, but is not limited to, the implied warranties of merchantability or fitness for a particular purpose. This article assumes that you are familiar with the programming language that is being demonstrated and with the tools that are used to create and to debug procedures. Microsoft support engineers can help explain the functionality of a particular procedure, but they will not modify these examples to provide added functionality or construct procedures to meet your specific requirements.

Directory Viewer Example Code
Use the following steps to create the directory viewer ASP page:

NOTE: You must have Basic/Clear Text, Integrated/NTLM, or Digest authentication enabled to use this example.  Open Notepad on a Web server that is running Microsoft Internet Information Server version 4.0 or Internet Information Services version 5.0.  Insert the following ASP code: <% @Language=&quot;VBScript&quot; %> <%   On Error Resume Next ' don't worry about errors

' turn on buffering Response.Buffer = True

' make sure that client is authenticated If Len(Trim(CStr(Request.ServerVariables(&quot;LOGON_USER&quot;)))) = 0 Then Response.Status = &quot;401 Access Denied&quot; Response.End End If

' get variables for the current page and submitted directory strURL = Request.ServerVariables(&quot;URL&quot;) strDIR = Request(&quot;DIR&quot;) ' if no directory was submitted, use the current folder If strDIR = &quot;&quot; Then strDIR = Server.MapPath(&quot;.&quot;)

' create file I/O objects Set objFSO = Server.CreateObject(&quot;Scripting.FileSystemObject&quot;) Set objFolder = objFSO.GetFolder(strDIR) %> Directory Viewer

Directory Viewer

 Save the page as &quot;Directory.asp&quot; in the root folder of your Web site. Browse to the page through HTTP, and then enter the path of the directory that you want to view. The folder's contents should display.