Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.
directory file list---insecure or not?
Name: Anthony Date: August 20, 2002 at 07:27:51 Pacific
Comment:
Hi, The following scenario appeared after settin up IIS server: "users report that the only information they are seeing in their browser is a list of .htm and .asp files. For security reasons, the first action you need to take is to disable the user¡¯s ability to view files of all web sites in the form of a list."
i'm wondering why it is considered "insecure" if users are able to view file list? there are many sites on the web that display files in this fashion and users can choose which files to view or download... any help?
Name: dan Date: August 20, 2002 at 07:33:50 Pacific
Reply:
There is nothing insecure about viewing the list, but combine that will all the actual security holes in IIS, you got problems.
0
Response Number 2
Name: Rick Date: August 21, 2002 at 04:38:56 Pacific
Reply:
Simply un-check "allow directory browsing" on the web site. It's not considered good policy to allow this, due to scripts, exe's and such being able to be downloaded, edited, etc. Normal web viewing does not allow most of that kind of activity and can be controlled better.
Letting users browse the files is the same as sharing your hard drive with them, would that be secure?
Summary: Here is my dilema!! I have a PC that will give this message whenever it feels like it. Windows 2000 could not start c:\winnt\sytem32\config\SYTEMced file is missing or corrupt Has anyone had this er...
Summary: Iam accesssing shared drives over the WAN and would like to know if there is some folder option that may be enable/disable in order to speed-up the directory listing process. I disabled the "offline ...
Summary: deltree is not included in windows 2000 (oops) but you can probably copy the command from another machine and it would work fine. Also in win2k you can use the /q switch with the del command to supres...
0 
