timcof
Mon Nov 10 04:32:28 CST 2003
Hmm...I assume you are using the filesystem object here. And you are doing a post. I am not sure urlscan can be configured to do this, so it may have to be
code-based. You can ping the asp folks to check: inetserver.asp.general
Thank you. I hope this information is helpful.
Tim Coffey [MSFT]
This posting is provided ?AS IS? with no warranties, and confers no rights. You assume all risk for your use. © 2001 Microsoft Corporation. All rights reserved.
--------------------
| Content-Class: urn:content-classes:message
| From: "Ove Kernell" <anonymous@discussions.microsoft.com>
| Sender: "Ove Kernell" <anonymous@discussions.microsoft.com>
| Subject: Filetypes in multipart forms
| Date: Tue, 21 Oct 2003 01:48:25 -0700
| Lines: 6
| Message-ID: <33c201c397b0$17521740$7d02280a@phx.gbl>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="iso-8859-1"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4910.0300
| Thread-Index: AcOXsBdSZP9NsLnzRyi5keYsARVgrA==
| Newsgroups: microsoft.public.inetserver.iis
| Path: cpmsftngxa06.phx.gbl
| Xref: cpmsftngxa06.phx.gbl microsoft.public.inetserver.iis:280527
| NNTP-Posting-Host: TK2MSFTNGXS01 10.40.2.125
| X-Tomcat-NG: microsoft.public.inetserver.iis
|
| Is there any way of stopping .exe,.asp etc files from
| beeing uploaded but allowing .doc files in a Multipart
| form?
| (Using IISAdmin, Lockdown or URLScan, not explicitly
| programming it in ASP)
| Ove Kernell
|