Samuel
-
Total Posts
:
11128
-
Reward points
:
106390
- Joined: May 23 '01
-
Status: offline
|
Disable script execution for the upfiles folder
Tue. Jun 3, '03 5:06 PM
( permalink)
If you allow file attachment for your messages, make sure you also disable script execution capability for the ~/upfiles and ~/avatars folder. Disabling script execution can be done with IIS 6 MMC (see screenshot below). With IIS 7, there is no such option. So, you need to change the Handler Mappings for the ~/upfiles folder using the new IIS Manager. Right click on one of the items whose Handler column shows IsapiModule. How it should be done is also available in the screen shot below. IIS 7:  IIS6: 
<message edited by Samuel on Mon. Feb 15, '10 8:13 AM>
ASPPlayground.net Developer
|
|
|
|