Re: IIS or directory security issue on 2003 E server




"Jesper" <Jesper@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:E4D7B884-DB33-4663-9610-8D1F8E6756E6@xxxxxxxxxxxxxxxx
Hmm. I would ask you whether you have made sure you accessed it using the
right virtual server and site name, but I presume you've checked that
right?

What do your IIS logs say?


The IIS log for visits only showing 404 error for that area request.
I don;t know what else to look for with logs on 2003 Server.


"GeekBoy" wrote:


"Jesper" <Jesper@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:1600A702-F2AC-4265-8C92-64CE09486711@xxxxxxxxxxxxxxxx
If you open the IIS Manager and expand the name of your computer you
will
see
three nodes. One is the "Web Services Extensions." php must be listed
as
an
extension there, with the name of the parser binary in the "required
files"
field.

You can quickly test if this is the problem by changing the status for
"Allow unknown CGI/ISAPI extensions" to Allow. If that makes things
work
this
is definitely your problem.



Looking...the "Unknow CGI" was permitted
And "unknown ISAPI" was on PROHIBITED so I changed it to Allowed and
still
same 404 error result.

The installation for PHP should have configured that for you, at least
logic
would have it that it should. You also need the appropriate ISAPI
filters
(I
*assume* PHP is implemented through an ISAPI filter, not a CGI
application,
but I don't know) enabled for each site where you host PHP.

Looking at that on the site I do not see any filters. Strangely when i
first
looked it showed ASP.NET v2.0. I pressed cancel and now it is gone now
with
no filters.
I would not even know what DLL to use.

As I mentioned I used another PHP app like 3 years ago..

Looking I found it still in an old web directory. It's called Zen cart
and
It worked fine.
So I don't know what is going on now.

Thanks again.






"GeekBoy" wrote:


"Jesper" <Jesper@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:C1BC2E91-DD2D-404B-9B2E-B16931BA6AA9@xxxxxxxxxxxxxxxx
Did you enable PHP as an extension that IIS serves? It won't serve
extensions
that are not enabled.

I think I had some other apps running on the server before maybe 3
years
ago. I forgot what.

I guess you mean in the Application Configuration in the properties of
IIS?
I do not have it setup in that area. I tried to set it in that area
when
this problem came up and then the server sees the file, but runs it as
a
binary file instead of a text document.
Maybe I am just setting it up wrong?

Thanks for the reply.

GB




"GeekBoy" wrote:

I got a web site up and have different directories as normally
anyone
would.
These directories have other locations of the web site.

I just made a new directory for phpBB and added index.php as a
default
file
in IIS.

However I keep getting a 404 error when i try to access the page
via
/board/
or /board/index.php.
I have even tried other php files with same error.

This seems to be a security issue. Checking the directory the new
directory
seem to have taken on the same security as the parent.

Any idea where to look?

Thanks











.



Relevant Pages

  • Re: IIS or directory security issue on 2003 E server
    ... Actually I was still using Server 2003. ... Maybe it was a service pack or update that screwed up the PHP v3 install I ... What do your IIS logs say? ... Looking at that on the site I do not see any filters. ...
    (microsoft.public.windows.server.security)
  • Re: IIS or directory security issue on 2003 E server
    ... What do your IIS logs say? ... There is no virutal server. ... *assume* PHP is implemented through an ISAPI filter, ... Looking at that on the site I do not see any filters. ...
    (microsoft.public.windows.server.security)
  • Re: PHP Instalation problems. Browser doesnt know what to do
    ... This is loaded and run as a local server (for class ... PHP 5.2.0 from php-5.2.0-win32-installer.msi ... # configuration directives that give the server its instructions. ...
    (comp.lang.php)
  • Re: PHP Instalation problems. Browser doesnt know what to do
    ... This is loaded and run as a local server (for class ... PHP 5.2.0 from php-5.2.0-win32-installer.msi ... # configuration directives that give the server its instructions. ...
    (comp.lang.php)
  • RE: phpBB Worm
    ... the getpwent function is not supported on Windows. ... it probably depends on the web server ... I looked at the decoded Perl script, ... was invoked by PHP, which should have the Web server's permissions, ...
    (Bugtraq)