Re: yup.

From: Jake Marx (msnews_at_longhead.com)
Date: 02/11/05


Date: Fri, 11 Feb 2005 14:41:29 -0700

nitm wrote:
>> Are the web servers running IIS, and if so, is URLScan or IIS
>> Lockdown installed on either/both?
>
> yes, both my computer & the server are running IIS, i don't know what
> URLScan or IIS Lockdown are... i don't think that it's installed on
> my computer (i didn't install it) and i have no idea if the server
> has them. what are they? should i install them?

Well, they're a good idea to have running if you have a publicly-accessible
IIS machine. They are designed to stop certain URL-based attacks and
prevent certain types of files from executing on the server. I was just
checking because they can cause unexpected results with certain scripts/file
types. I doubt this is the case here since you didn't install them.

>> One other thing - is Option Explicit at the top of your ASP
>> document? If not, add it and make sure you aren't using any
>> undeclared variables. I noticed you use mpfilename in the code
>> above but tmpfilename earlier - just curious to know if that is
>> intentional or a typo. Option Explicit will tell you for sure.
>
> yes, i use Option Explicit, always.
> there's no mpfilename, it's tmpfilename but i guess i deleted the 't'
> when i copied the code.. sorry for that.

No problem - just checking. <g>

> i take it that you only found that this problem happenned to other
> people but there was no answer to the problem....

Yes. You may want to try your luck in one of the ASP or IIS groups to see
if anyone knows what's going on. Sorry I couldn't be of more assistance.

-- 
Regards,
Jake Marx
MS MVP - Excel
www.longhead.com
[please keep replies in the newsgroup - email address unmonitored] 


Relevant Pages

  • Re: I hate IIS - "Server Application Unavailable" error message
    ... I would but there is not "Application Pools" underneath the local ... Did you install, at least, the Web or Standard versions of Windows Server 2003? ... except when you choose to install IIS on a domain controller. ...
    (microsoft.public.dotnet.framework.aspnet)
  • RE: Internet printing
    ... Configuring the IPP Print Server: ... (IIS is synonymous with PWS, Peer Web Services, which is what ... -This will install and configure basic IIS on the current machine. ...
    (microsoft.public.windows.server.sbs)
  • Re: No DHCP in administrative tools
    ... OK, we need to install the DHCP service, but we're gonna hold of a mo' on ... In computer management, expand IIS, expand websites, which sites do you ... SQL Server Config ...
    (microsoft.public.windows.server.sbs)
  • Re: OWA 403 Forbidden, POP3,
    ... Is there a way to just re-install the IIS components to a set of Default ... incorrect type of install of Trend not in a virtual directory was probably ... From your post, I understand you after you rebuild SBS Server, you ... Go to your "%SystemRoot%\IIS Temporary Compressed Files" ...
    (microsoft.public.windows.server.sbs)
  • [NT] Heap Overrun in HTR Chunked Encoding Could Enable Web Server Compromise
    ... This patch eliminates a newly discovered vulnerability affecting Internet ... in IIS 4.0 and 5.0, and could likewise be used to overrun heap memory on ... allowing code to be run on the server. ... * Microsoft has long recommended disabling HTR functionality unless there ...
    (Securiteam)