Re: IIS or directory security issue on 2003 E server

No worries. Sorry we couldn't make it start working immediately.

To be honest, I think the reason it worked three years ago was probably
because you weren't using Server 2003 back then. IIS 5 doesn't have most of
these restrictions, so it was less work making it work. Either that or PHP
wrote a better installer back then. :-)

"GeekBoy" wrote:

I found a link from the link that gives a step by step guide to install it,
but it mentions php5isapi.dll in the PHP directory.

I can find no such file.
Well guess I have to try tomorrow..get late..

Thanks for the great help so far.

GB

"Jesper" <Jesper@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:FFC010C0-4676-4A64-8BA1-1D5FB5C082FE@xxxxxxxxxxxxxxxx
BTW, this page talks about 404 errors with PHP on Windows, and every one
of
the mentions point to what I was saying:
http://us3.php.net/manual/en/install.windows.php

"Jesper" wrote:

Hmm. I would ask you whether you have made sure you accessed it using the
right virtual server and site name, but I presume you've checked that
right?

What do your IIS logs say?

"GeekBoy" wrote:


"Jesper" <Jesper@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:1600A702-F2AC-4265-8C92-64CE09486711@xxxxxxxxxxxxxxxx
If you open the IIS Manager and expand the name of your computer you
will
see
three nodes. One is the "Web Services Extensions." php must be listed
as
an
extension there, with the name of the parser binary in the "required
files"
field.

You can quickly test if this is the problem by changing the status
for
"Allow unknown CGI/ISAPI extensions" to Allow. If that makes things
work
this
is definitely your problem.



Looking...the "Unknow CGI" was permitted
And "unknown ISAPI" was on PROHIBITED so I changed it to Allowed and
still
same 404 error result.

The installation for PHP should have configured that for you, at
least
logic
would have it that it should. You also need the appropriate ISAPI
filters
(I
*assume* PHP is implemented through an ISAPI filter, not a CGI
application,
but I don't know) enabled for each site where you host PHP.

Looking at that on the site I do not see any filters. Strangely when i
first
looked it showed ASP.NET v2.0. I pressed cancel and now it is gone now
with
no filters.
I would not even know what DLL to use.

As I mentioned I used another PHP app like 3 years ago..

Looking I found it still in an old web directory. It's called Zen cart
and
It worked fine.
So I don't know what is going on now.

Thanks again.






"GeekBoy" wrote:


"Jesper" <Jesper@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:C1BC2E91-DD2D-404B-9B2E-B16931BA6AA9@xxxxxxxxxxxxxxxx
Did you enable PHP as an extension that IIS serves? It won't serve
extensions
that are not enabled.

I think I had some other apps running on the server before maybe 3
years
ago. I forgot what.

I guess you mean in the Application Configuration in the properties
of
IIS?
I do not have it setup in that area. I tried to set it in that area
when
this problem came up and then the server sees the file, but runs it
as a
binary file instead of a text document.
Maybe I am just setting it up wrong?

Thanks for the reply.

GB




"GeekBoy" wrote:

I got a web site up and have different directories as normally
anyone
would.
These directories have other locations of the web site.

I just made a new directory for phpBB and added index.php as a
default
file
in IIS.

However I keep getting a 404 error when i try to access the page
via
/board/
or /board/index.php.
I have even tried other php files with same error.

This seems to be a security issue. Checking the directory the new
directory
seem to have taken on the same security as the parent.

Any idea where to look?

Thanks












.

Relevant Pages

  • Re: IIS or directory security issue on 2003 E server
    ... "Allow unknown CGI/ISAPI extensions" to Allow. ... You also need the appropriate ISAPI ... *assume* PHP is implemented through an ISAPI filter, ... Looking at that on the site I do not see any filters. ...
    (microsoft.public.windows.server.security)
  • Re: IIS or directory security issue on 2003 E server
    ... but it mentions php5isapi.dll in the PHP directory. ... "Allow unknown CGI/ISAPI extensions" to Allow. ... You also need the appropriate ISAPI ... Looking at that on the site I do not see any filters. ...
    (microsoft.public.windows.server.security)
  • RE: STG Security Advisory: [SSA-20041215-17] Vulnerability of uploading files with multiple exten
    ... "multiple extensions" behaviour in the past. ... There are a huge number of 3rd party PHP scripts out there ... upload a file without a registered MIME type are somewhat reduced. ... extensions behaviour for handlers as there seemed no legitimate ...
    (Bugtraq)
  • Loading DLLs from different path
    ... PHP is a popular server-side scripting language for web servers. ... It popularity is mainly due that it has many 3rd party extensions. ... The issue is that our DLL is dependent on RPC application server API DLLs in a different folder. ... The problem is that we never recommended putting dlls on the PATH nor do we recommend for our customers to have copies of DLLS over all the place. ...
    (microsoft.public.win32.programmer.kernel)
  • Re: [PHP] Include an encoder into PHP distribution?
    ... >> libraries will not be accepted by the PHP group. ... I think that an encoder ... PHP already comes with extensions for the same ... caching, including Zend and Ioncube's. ...
    (php.general)