Re: ASPX form Uploads a file even without IIS Write permission

From: Christian Paparelli (cpaparelli_nospam_at_ithost.ch)
Date: 08/20/05

  • Next message: Miha Pihler [MVP]: "Re: OMA/OWA password masking" 
    Date: Sat, 20 Aug 2005 09:20:45 +0200

    "FB" <FB@discussions.microsoft.com> ha scritto nel messaggio
    news:B9069C32-8121-42BD-A591-CF04B3EDE0E2@microsoft.com...

    Hi

    >A customer have a IIS 6 web server and even with IIS Write property
    >DISABLED,
    > an ASPX form can upload files to the server.
    >
    > The authentication is Anon (via IUSR_ user) and the IUSR_User have RWXD
    > rights on the folder where the upload is stored.
    >
    > In the properties of the IIS folder where upload is done, the Read
    > permission is set, but Write, SourceAccerss and Browse are disabled.
    >
    > Why the upload works???

    It works because the anon user (IUSR_user) have write permission.
    The write property on iis is requested for the PUT HTTP command but if you
    make an upload via an aspx form you make a HTTP POST 

    -- 
Christian Paparelli
http://www.ithost.ch
  • Next message: Miha Pihler [MVP]: "Re: OMA/OWA password masking"

    Relevant Pages

    • Re: Publishing all pages in Publisher 2003
      ... for some reason the bottom navbar that Publisher produces with its ... folder entirely, because some of your images are indeed on the server: ... upload all the files. ... Then either log on to your host control panel and use the file manager ...
      (microsoft.public.publisher.webdesign)
    • Re: Website only views in IE
      ... index.htm file and your index_files folder, direct those files to a folder ... Publisher wizard built navbars rendering in IE8, ... fool proof rule for this but it seems that the fancier the border, ... Be sure to compress your images before you upload again. ...
      (microsoft.public.publisher.webdesign)
    • Re: Problem loading Pub 2003 website
      ... Be sure to upload the index_files folder ... pictures still won't load, although one of the before pictures on the ... Be sure to overwrite or manually delete the old Publisher .htm files ...
      (microsoft.public.publisher.webdesign)
    • Re: Problem loading Pub 2003 website
      ... Be sure to upload the index_files folder ... pictures still won't load, although one of the before pictures on the ... Be sure to overwrite or manually delete the old Publisher .htm files ...
      (microsoft.public.publisher.webdesign)
    • Re: Publishing all pages in Publisher 2003
      ... upload all the files. ... When you insert large image files into your Publisher doc, ... graphics and upload the new index.htm file and the new index_files folder. ... Then either log on to your host control panel and use the file manager to ...
      (microsoft.public.publisher.webdesign)