Disable script execution for the upfiles folder (Samuel)

Tue, 03 Jun 2003 17:06:44 GMT

If you allow file attachment for your messages, make sure you also disable script execution capability for the ~/upfiles and ~/avatars folder.
Disabling script execution can be done with IIS 6 MMC (see screenshot below).

With IIS 7, there is no such option. So, you need to change the Handler Mappings for the ~/upfiles folder using the new IIS Manager. Right click on one of the items whose Handler column shows IsapiModule. How it should be done is also available in the screen shot below.

IIS 7:
[attachment=0]

IIS6:
[attachment=1]