Server.MapPath()
Disallowed Path Characters
/eng/include/db.asp, line 2
The '..' characters are not allowed in the Path parameter for the MapPath method.