Re: Upload folder permissions

From: Ray (name_at_mweb.co.za)
Date: 01/14/05 

Date: Fri, 14 Jan 2005 18:22:50 +0200

Thanks to all

Setting Execution = None solved my problem..

Thanks again....

"Alok Kumar" <AlokKumar@discussions.microsoft.com> wrote in message
news:D4381231-9919-4B95-8494-3A0E8C1679D6@microsoft.com...
> You can set the NT authentication for the images folder. So only user who
> have specific permission can upload files.
> You can set the execute permission for the image directory to "none" and
> it
> will not execute anything including .asp pages.
>
> Alok Kumar
>
> "Ray" wrote:
>
>> Hi
>>
>> I am running a website with a classifieds section on it that allows users
>> to
>> post ads and upload an image for the ad.
>>
>> The problem is that the site was hacked this weekend by Team_Evil through
>> this image folder whereby they managed to upload code to it and execute
>> it
>> resulting in my whole site being defaced.
>>
>> My script does a check on the file extension to verify that it is of an
>> image type before the form posts and allows the upload.
>>
>> Is there anyway to setup permissions on the image folder whereby people
>> can
>> still upload images and that the images be deleted when the ad is deleted
>> but no asp scripts can be executed from this folder incase they get by
>> the
>> extension checking again? All the scripts make use of FSO to upload and
>> delete the images..
>>
>> Any guidelines and assistance will be appreciated.
>>
>> Thanks
>> Ray
>>
>>
>>

Relevant Pages

  • Re: how to compile M file involving tens of images to be imreaded
    ... Joshuajudson wrote: ... > matlab settings and rung the execute the program.This will imread ... > the images in the file. ...
    (comp.soft-sys.matlab)
  • Re: Refreshing multiple images
    ... And changing two images with setTimeout at different intervals isn't hard. ... setTimeout('refreshIt()',60000); ... Appending Math.randomappends a random number to it making it a unique URL and thus forcing a reload from the server. ... Then, every 60 seconds when the function is executed, it sets another setTimeout to execute the function again. ...
    (comp.lang.javascript)
  • Re: Web based email issues
    ... See JPEG ... asking about viewing JPG and such images while browsing the internet. ... very serious problem for IE, I had not seen IE execute code based ...
    (alt.computer.security)
  • FP 2003 Messed-up settings - Please help solve...
    ... Interlinked images and pages the way FP does it now will not work on my cpanel server, unless I publish via FP Server Extensions, and I would rather do it as before. ... Even if first importing the image to the image folder within the web site, ... I won't use server extensions to upload. ...
    (microsoft.public.frontpage.client)
  • Comparing Files with only Date Time Stamp Difference
    ... We have this strange situation: ... incremental compilations. ... Each time a change is made to any part of the source code we execute a ... need an automated way to compare the previous copies of the images vs. ...
    (microsoft.public.dotnet.languages.vb)
Loading