Re: Ampersand in folder name IIS 5.0
anonymous_at_discussions.microsoft.com
Date: 03/25/04
- Next message: R. Ian Lee: "Unload ASP Application in Win2k3"
- Previous message: doug: "HTM pages problem"
- In reply to: Tom Kaminski [MVP]: "Re: Ampersand in folder name IIS 5.0"
- Next in thread: Jerry Pisk: "Re: Ampersand in folder name IIS 5.0"
- Messages sorted by: [ date ] [ thread ]
Date: Thu, 25 Mar 2004 07:40:11 -0800
>-----Original Message-----
>"Thomas" <anonymous@discussions.microsoft.com> wrote in
message
>news:138f701c4126e$1dc74e40$a101280a@phx.gbl...
>> I have tried with encoding the & to either %26 and &.
>> It didn't help.
>> I had the same issue with the dot in folder name, which
I
>> fixed through modifying urlscan.ini file (setting
>> AllowDotInPath = 1)
>> Thomas
>
>Now you've opened up a potential security hole.
>
>This is one of those things (using "&" or "." or even
spaces in folder/file
>names) that even though you can do it, it's just not a
good idea.
>
>--
>Tom Kaminski IIS MVP
>http://www.iistoolshed.com/ - tools, scripts, and
utilities for running IIS
>http://mvp.support.microsoft.com/
>http://www.microsoft.com/windowsserver2003/community/cente
rs/iis/
>
>
>
>.
>
Yup I undrestand that. The site is an Intranet and I check
for file types when they are uploaded to the file server.
Only certain files are allowed to be uploaded.
Thanks.
Thomas
- Next message: R. Ian Lee: "Unload ASP Application in Win2k3"
- Previous message: doug: "HTM pages problem"
- In reply to: Tom Kaminski [MVP]: "Re: Ampersand in folder name IIS 5.0"
- Next in thread: Jerry Pisk: "Re: Ampersand in folder name IIS 5.0"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|