Hacked by tugr@

TheMSsForum.com: The Microsoft Software Forum

The MSS Forum ‹ IIS
- Archive
  - Biz
  - MCSE
  - CRM
  - Drivers
  - Framework
  - ADO
  - ASP
  - Compact
  - Forms
  - Dotnet
  - C#
  - VB
  - FontpageGen
  - Excel
  - WorkSheet
  - Exchange
  - Setup
  - Fox
  - Fontpage
  - ASP
  - IIS
  - Entourage
  - Money
  - Messanger
  - PocketPC
  - Powerpoint
  - Project
  - Publisher
  - Excel
  - VB
  - Security
  - Portal
  - Services
  - SQLServerDev
  - SVCS
  - SQLServer
  - VB
  - VC
  - MFC
  - ExcelGen

- Previous
  - 1
    - Can't edit/delete files!!! Hi there, I am running IIS 6.0, whenever I navigate to a Website's folder under wwwroot and try to edit/delete files, I recieve the following message: "Cannot delete default: Access is denied - Make sure disk is not full or right-protected and that the file is not currently in use." It seems like this has something to do with IIS caching of the pages but I am not sure what the workaround is. How else would you edit the Website's source files? The editor I am using doesn't allow for frontpage extensions, so I copy the files over manually. This becomes a real pain when I get the above error message. Thanks for you help! Marc. Tag: Hacked by tugr@ Tag: 352542
  - 2
    - default virtual directories I would like to know how to setup virtual directories in IIS5 (2000) and IIS6 (2003). I want virtual directories that 1. are created automatically when I create a new site and 2. I can apply to existing sites. 1 is the most important. Thanks in advance. Tag: Hacked by tugr@ Tag: 352541
  - 3
    - Directory Security Security is to to "integrated authentication". Server is win2k3, clients vary .. but all minimum win2ksp4. Browsing to http://servera (ie, just the netbios name) works the way we want it. Users are not prompted for username and password. Browsing to http://servera.domain.com (ie, the fqdn) doesn't. You are always prompted for a username and password. What can we do such that we can share a FQDN with out users (thus available internal and external) that will perform "pass through" authenication? Now, as an early follow up, the url we're _really_ sharing with out users is http://cnmae.domain.com. Will this present a problem? The http://cname (ie, netbios) works just fine .. Thanks! Tag: Hacked by tugr@ Tag: 352539
  - 4
    - configure PHP4 for PHP on IIS6 using SQL 2000 ? Hi, I have installed a PHP SQL application named "Shop-Scripts" on IIS6. The setup DB options worked ok to allow me to connect to an SQL server DB but most of the PHP pages just display a blank white page. I have another PHP app that seems to run fine on in another DIR within the same default website. This other app uses MySql however. I was just wondering if anyone knew exactly how to configure PHP.ini to allow PHP to work on IIS6 with SQL SERVER 2000 (assuming this was the problem) ? NOTE: this line has been enabled extension=php_mssql.dll. NOTE: connection to SQL DB must be ok as the install program managed to create table + add a few values. Thanks for any information at all, im lost. Scott -------------------------------------------------------------------------------------------- [PHP] ;;;;;;;;;;; ; WARNING ; ;;;;;;;;;;; ; This is the default settings file for new PHP installations. ; By default, PHP installs itself with a configuration suitable for ; development purposes, and *NOT* for production purposes. ; For several security-oriented considerations that should be taken ; before going online with your site, please consult php.ini-recommended ; and http://php.net/manual/en/security.php. ;;;;;;;;;;;;;;;;;;; ; About this file ; ;;;;;;;;;;;;;;;;;;; ; This file controls many aspects of PHP's behavior. In order for PHP to ; read it, it must be named 'php.ini'. PHP looks for it in the current ; working directory, in the path designated by the environment variable ; PHPRC, and in the path that was defined in compile time (in that order). ; Under Windows, the compile-time path is the Windows directory. The ; path in which the php.ini file is looked for can be overridden using ; the -c argument in command line mode. ; ; The syntax of the file is extremely simple. Whitespace and Lines ; beginning with a semicolon are silently ignored (as you probably guessed). ; Section headers (e.g. [Foo]) are also silently ignored, even though ; they might mean something in the future. ; ; Directives are specified using the following syntax: ; directive = value ; Directive names are *case sensitive* - foo=bar is different from FOO=bar. ; ; The value can be a string, a number, a PHP constant (e.g. E_ALL or M_PI), one ; of the INI constants (On, Off, True, False, Yes, No and None) or an expression ; (e.g. E_ALL & ~E_NOTICE), or a quoted string ("foo"). ; ; Expressions in the INI file are limited to bitwise operators and parentheses: ; | bitwise OR ; & bitwise AND ; ~ bitwise NOT ; ! boolean NOT ; ; Boolean flags can be turned on using the values 1, On, True or Yes. ; They can be turned off using the values 0, Off, False or No. ; ; An empty string can be denoted by simply not writing anything after the equal ; sign, or by using the None keyword: ; ; foo = ; sets foo to an empty string ; foo = none ; sets foo to an empty string ; foo = "none" ; sets foo to the string 'none' ; ; If you use constants in your value, and these constants belong to a ; dynamically loaded extension (either a PHP extension or a Zend extension), ; you may only use these constants *after* the line that loads the extension. ; ; All the values in the php.ini-dist file correspond to the builtin ; defaults (that is, if no php.ini is used, or if you delete these lines, ; the builtin defaults will be identical). ;;;;;;;;;;;;;;;;;;;; ; Language Options ; ;;;;;;;;;;;;;;;;;;;; ; Enable the PHP scripting language engine under Apache. engine = On ; Allow the <? tag. Otherwise, only <?php and <script> tags are recognized. ; NOTE: Using short tags should be avoided when developing applications or ; libraries that are meant for redistribution, or deployment on PHP ; servers which are not under your control, because short tags may not ; be supported on the target server. For portable, redistributable code, ; be sure not to use short tags. short_open_tag = On ; Allow ASP-style tags. asp_tags = Off ; The number of significant digits displayed in floating point numbers. precision = 12 ; Enforce year 2000 compliance (will cause problems with non-compliant browsers) y2k_compliance = On ; Output buffering allows you to send header lines (including cookies) even ; after you send body content, at the price of slowing PHP's output layer a ; bit. You can enable output buffering during runtime by calling the output ; buffering functions. You can also enable output buffering for all files by ; setting this directive to On. If you wish to limit the size of the buffer ; to a certain size - you can use a maximum number of bytes instead of 'On', as ; a value for this directive (e.g., output_buffering=4096). output_buffering = Off ; You can redirect all of the output of your scripts to a function. For ; example, if you set output_handler to "mb_output_handler", character ; encoding will be transparently converted to the specified encoding. ; Setting any output handler automatically turns on output buffering. ; Note: People who wrote portable scripts should not depend on this ini ; directive. Instead, explicitly set the output handler using ob_start(). ; Using this ini directive may cause problems unless you know what script ; is doing. ; Note: You cannot use both "mb_output_handler" with "ob_iconv_handler" ; and you cannot use both "ob_gzhandler" and "zlib.output_compression". ;output_handler = ; Transparent output compression using the zlib library ; Valid values for this option are 'off', 'on', or a specific buffer size ; to be used for compression (default is 4KB) ; Note: Resulting chunk size may vary due to nature of compression. PHP ; outputs chunks that are few hundreds bytes each as a result of ; compression. If you prefer a larger chunk size for better ; performance, enable output_buffering in addition. ; Note: You need to use zlib.output_handler instead of the standard ; output_handler, or otherwise the output will be corrupted. zlib.output_compression = Off ; You cannot specify additional output handlers if zlib.output_compression ; is activated here. This setting does the same as output_handler but in ; a different order. ;zlib.output_handler = ; Implicit flush tells PHP to tell the output layer to flush itself ; automatically after every output block. This is equivalent to calling the ; PHP function flush() after each and every call to print() or echo() and each ; and every HTML block. Turning this option on has serious performance ; implications and is generally recommended for debugging purposes only. implicit_flush = Off ; The unserialize callback function will called (with the undefind class' ; name as parameter), if the unserializer finds an undefined class ; which should be instanciated. ; A warning appears if the specified function is not defined, or if the ; function doesn't include/implement the missing class. ; So only set this entry, if you really want to implement such a ; callback-function. unserialize_callback_func= ; Whether to enable the ability to force arguments to be passed by reference ; at function call time. This method is deprecated and is likely to be ; unsupported in future versions of PHP/Zend. The encouraged method of ; specifying which arguments should be passed by reference is in the function ; declaration. You're encouraged to try and turn this option Off and make ; sure your scripts work properly with it in order to ensure they will work ; with future versions of the language (you will receive a warning each time ; you use this feature, and the argument will be passed by value instead of by ; reference). allow_call_time_pass_reference = On ; Safe Mode ; safe_mode = Off ; By default, Safe Mode does a UID compare check when ; opening files. If you want to relax this to a GID compare, ; then turn on safe_mode_gid. safe_mode_gid = Off ; When safe_mode is on, UID/GID checks are bypassed when ; including files from this directory and its subdirectories. ; (directory must also be in include_path or full path must ; be used when including) safe_mode_include_dir = ; When safe_mode is on, only executables located in the safe_mode_exec_dir ; will be allowed to be executed via the exec family of functions. safe_mode_exec_dir = ; Setting certain environment variables may be a potential security breach. ; This directive contains a comma-delimited list of prefixes. In Safe Mode, ; the user may only alter environment variables whose names begin with the ; prefixes supplied here. By default, users will only be able to set ; environment variables that begin with PHP_ (e.g. PHP_FOO=BAR). ; ; Note: If this directive is empty, PHP will let the user modify ANY ; environment variable! safe_mode_allowed_env_vars = PHP_ ; This directive contains a comma-delimited list of environment variables that ; the end user won't be able to change using putenv(). These variables will be ; protected even if safe_mode_allowed_env_vars is set to allow to change them. safe_mode_protected_env_vars = LD_LIBRARY_PATH ; open_basedir, if set, limits all file operations to the defined directory ; and below. This directive makes most sense if used in a per-directory ; or per-virtualhost web server configuration file. This directive is ; *NOT* affected by whether Safe Mode is turned On or Off. ;open_basedir = ; This directive allows you to disable certain functions for security reasons. ; It receives a comma-delimited list of function names. This directive is ; *NOT* affected by whether Safe Mode is turned On or Off. disable_functions = ; This directive allows you to disable certain classes for security reasons. ; It receives a comma-delimited list of class names. This directive is ; *NOT* affected by whether Safe Mode is turned On or Off. disable_classes = ; Colors for Syntax Highlighting mode. Anything that's acceptable in ; <font color="??????"> would work. ;highlight.string = #DD0000 ;highlight.comment = #FF9900 ;highlight.keyword = #007700 ;highlight.bg = #FFFFFF ;highlight.default = #0000BB ;highlight.html = #000000 ; ; Misc ; ; Decides whether PHP may expose the fact that it is installed on the server ; (e.g. by adding its signature to the Web server header). It is no security ; threat in any way, but it makes it possible to determine whether you use PHP ; on your server or not. expose_php = On ;;;;;;;;;;;;;;;;;;; ; Resource Limits ; ;;;;;;;;;;;;;;;;;;; max_execution_time = 30 ; Maximum execution time of each script, in seconds max_input_time = 60 ; Maximum amount of time each script may spend parsing request data memory_limit = 8M ; Maximum amount of memory a script may consume (8MB) ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; ; Error handling and logging ; ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; ; error_reporting is a bit-field. Or each number up to get desired error ; reporting level ; E_ALL - All errors and warnings ; E_ERROR - fatal run-time errors ; E_WARNING - run-time warnings (non-fatal errors) ; E_PARSE - compile-time parse errors ; E_NOTICE - run-time notices (these are warnings which often result ; from a bug in your code, but it's possible that it was ; intentional (e.g., using an uninitialized variable and ; relying on the fact it's automatically initialized to an ; empty string) ; E_CORE_ERROR - fatal errors that occur during PHP's initial startup ; E_CORE_WARNING - warnings (non-fatal errors) that occur during PHP's ; initial startup ; E_COMPILE_ERROR - fatal compile-time errors ; E_COMPILE_WARNING - compile-time warnings (non-fatal errors) ; E_USER_ERROR - user-generated error message ; E_USER_WARNING - user-generated warning message ; E_USER_NOTICE - user-generated notice message ; ; Examples: ; ; - Show all errors, except for notices ; ;error_reporting = E_ALL & ~E_NOTICE ; ; - Show only errors ; ;error_reporting = E_COMPILE_ERROR|E_ERROR|E_CORE_ERROR ; ; - Show all errors except for notices ; error_reporting = E_ALL & ~E_NOTICE ; Print out errors (as a part of the output). For production web sites, ; you're strongly encouraged to turn this feature off, and use error logging ; instead (see below). Keeping display_errors enabled on a production web site ; may reveal security information to end users, such as file paths on your Web ; server, your database schema or other information. display_errors = On ; Even when display_errors is on, errors that occur during PHP's startup ; sequence are not displayed. It's strongly recommended to keep ; display_startup_errors off, except for when debugging. display_startup_errors = Off ; Log errors into a log file (server-specific log, stderr, or error_log (below)) ; As stated above, you're strongly advised to use error logging in place of ; error displaying on production web sites. log_errors = Off ; Set maximum length of log_errors. In error_log information about the source is ; added. The default is 1024 and 0 allows to not apply any maximum length at all. log_errors_max_len = 1024 ; Do not log repeated messages. Repeated errors must occur in same file on same ; line until ignore_repeated_source is set true. ignore_repeated_errors = Off ; Ignore source of message when ignoring repeated messages. When this setting ; is On you will not log errors with repeated messages from different files or ; sourcelines. ignore_repeated_source = Off ; If this parameter is set to Off, then memory leaks will not be shown (on ; stdout or in the log). This has only effect in a debug compile, and if ; error reporting includes E_WARNING in the allowed list report_memleaks = On ; Store the last error/warning message in $php_errormsg (boolean). track_errors = Off ; Disable the inclusion of HTML tags in error messages. ;html_errors = Off ; If html_errors is set On PHP produces clickable error messages that direct ; to a page describing the error or function causing the error in detail. ; You can download a copy of the PHP manual from http://www.php.net/docs.php ; and change docref_root to the base URL of your local copy including the ; leading '/'. You must also specify the file extension being used including ; the dot. ;docref_root = "/phpmanual/" ;docref_ext = .html ; String to output before an error message. ;error_prepend_string = "<font color=ff0000>" ; String to output after an error message. ;error_append_string = "</font>" ; Log errors to specified file. ;error_log = filename ; Log errors to syslog (Event Log on NT, not valid in Windows 95). ;error_log = syslog ;;;;;;;;;;;;;;;;; ; Data Handling ; ;;;;;;;;;;;;;;;;; ; ; Note - track_vars is ALWAYS enabled as of PHP 4.0.3 ; The separator used in PHP generated URLs to separate arguments. ; Default is "&". ;arg_separator.output = "&" ; List of separator(s) used by PHP to parse input URLs into variables. ; Default is "&". ; NOTE: Every character in this directive is considered as separator! ;arg_separator.input = ";&" ; This directive describes the order in which PHP registers GET, POST, Cookie, ; Environment and Built-in variables (G, P, C, E & S respectively, often ; referred to as EGPCS or GPC). Registration is done from left to right, newer ; values override older values. variables_order = "EGPCS" ; Whether or not to register the EGPCS variables as global variables. You may ; want to turn this off if you don't want to clutter your scripts' global scope ; with user data. This makes most sense when coupled with track_vars - in which ; case you can access all of the GPC variables through the $HTTP_*_VARS[], ; variables. ; ; You should do your best to write your scripts so that they do not require ; register_globals to be on; Using form variables as globals can easily lead ; to possible security problems, if the code is not very well thought of. register_globals = On ; This directive tells PHP whether to declare the argv&argc variables (that ; would contain the GET information). If you don't use these variables, you ; should turn it off for increased performance. register_argc_argv = On ; Maximum size of POST data that PHP will accept. post_max_size = 8M ; This directive is deprecated. Use variables_order instead. gpc_order = "GPC" ; Magic quotes ; ; Magic quotes for incoming GET/POST/Cookie data. magic_quotes_gpc = On ; Magic quotes for runtime-generated data, e.g. data from SQL, from exec(), etc. magic_quotes_runtime = Off ; Use Sybase-style magic quotes (escape ' with '' instead of \'). magic_quotes_sybase = Off ; Automatically add files before or after any PHP document. auto_prepend_file = auto_append_file = ; As of 4.0b4, PHP always outputs a character encoding by default in ; the Content-type: header. To disable sending of the charset, simply ; set it to be empty. ; ; PHP's built-in default is text/html default_mimetype = "text/html" ;default_charset = "iso-8859-1" ; Always populate the $HTTP_RAW_POST_DATA variable. ;always_populate_raw_post_data = On ;;;;;;;;;;;;;;;;;;;;;;;;; ; Paths and Directories ; ;;;;;;;;;;;;;;;;;;;;;;;;; ; UNIX: "/path1:/path2" ;include_path = ".:" ; ; Windows: "\path1;\path2" ;***** Added by go-pear include_path=".;C:\Program Files\php4\includes\pear" ;***** ; The root of the PHP pages, used only if nonempty. ; if PHP was not compiled with FORCE_REDIRECT, you SHOULD set doc_root ; if you are running php as a CGI under any web server (other than IIS) ; see documentation for security issues. The alternate is to use the ; cgi.force_redirect configuration below ; doc_root = ; The directory under which PHP opens the script using /~username used only ; if nonempty. user_dir = ; Directory in which the loadable extensions (modules) reside. extension_dir = "C:\Program Files\php4\php\extensions" ; Whether or not to enable the dl() function. The dl() function does NOT work ; properly in multithreaded servers, such as IIS or Zeus, and is automatically ; disabled on them. enable_dl = On ; cgi.force_redirect is necessary to provide security running PHP as a CGI under ; most web servers. Left undefined, PHP turns this on by default. You can ; turn it off here AT YOUR OWN RISK ; **You CAN safely turn this off for IIS, in fact, you MUST.** cgi.force_redirect = 0 ; if cgi.force_redirect is turned on, and you are not running under Apache or Netscape ; (iPlanet) web servers, you MAY need to set an environment variable name that PHP ; will look for to know it is OK to continue execution. Setting this variable MAY ; cause security issues, KNOW WHAT YOU ARE DOING FIRST. ; cgi.redirect_status_env = 1; ; FastCGI under IIS (on WINNT based OS) supports the ability to impersonate ; security tokens of the calling client. This allows IIS to define the ; security context that the request runs under. mod_fastcgi under Apache ; does not currently support this feature (03/17/2002) ; Set to 1 if running under IIS. Default is zero. fastcgi.impersonate = 1; ; cgi.rfc2616_headers configuration option tells PHP what type of headers to ; use when sending HTTP response code. If it's set 0 PHP sends Status: header that ; is supported by Apache. When this option is set to 1 PHP will send ; RFC2616 compliant header. ; Set to 1 if running under IIS. Default is zero. ;cgi.rfc2616_headers = 0 ;;;;;;;;;;;;;;;; ; File Uploads ; ;;;;;;;;;;;;;;;; ; Whether to allow HTTP file uploads. file_uploads = On ; Temporary directory for HTTP uploaded files (will use system default if not ; specified). ;upload_tmp_dir = "C:\Program Files\php4\uploads" ; Maximum allowed size for uploaded files. upload_max_filesize = 2M ;;;;;;;;;;;;;;;;;; ; Fopen wrappers ; ;;;;;;;;;;;;;;;;;; ; Whether to allow the treatment of URLs (like http:// or ftp://) as files. allow_url_fopen = On ; Define the anonymous ftp password (your email address) ;from="john@doe.com" ; Define the User-Agent string ; user_agent="PHP" ; Default timeout for socket based streams (seconds) default_socket_timeout = 60 ; If your scripts have to deal with files from Macintosh systems, ; or you are running on a Mac and need to deal with files from ; unix or win32 systems, setting this flag will cause PHP to ; automatically detect the EOL character in those files so that ; fgets() and file() will work regardless of the source of the file. ; auto_detect_line_endings = Off ;;;;;;;;;;;;;;;;;;;;;; ; Dynamic Extensions ; ;;;;;;;;;;;;;;;;;;;;;; ; ; If you wish to have an ;ion loaded automatically, use the following ; syntax: ; ; extension=modulename.extension ; ; For example, on Windows: ; ; extension=msql.dll ; ; ... or under UNIX: ; ; extension=msql.so ; ; Note that it should be the name of the module only; no directory information ; needs to go here. Specify the location of the extension with the ; extension_dir directive above. ;Windows Extensions ;Note that MySQL and ODBC support is now built in, so no dll is needed for it. ; extension=php_sqlite.dll extension=php_mssql.dll ;extension=php_oci8.dll ;extension=php_pgsql.dll ;extension=php_adodb.dll ;extension=php_imap.dll extension=php_curl.dll extension=php_gd2.dll ;extension=php_bz2.dll ;extension=php_cpdf.dll ;extension=php_crack.dll ;extension=php_db.dll ;extension=php_dba.dll ;extension=php_dbase.dll ;extension=php_dbx.dll ;extension=php_domxml.dll ;extension=php_exif.dll ;extension=php_fdf.dll ;extension=php_filepro.dll ;extension=php_gettext.dll ;extension=php_hyperwave.dll ;extension=php_iconv.dll ;extension=php_ifx.dll ;extension=php_iisfunc.dll ;extension=php_interbase.dll ;extension=php_java.dll ;extension=php_ldap.dll ;extension=php_mbstring.dll ;extension=php_mcrypt.dll ;extension=php_mhash.dll ;extension=php_mime_magic.dll ;extension=php_ming.dll ;extension=php_msql.dll ;extension=php_openssl.dll ;extension=php_oracle.dll ;extension=php_pdf.dll ;extension=php_printer.dll ;extension=php_shmop.dll ;extension=php_snmp.dll ;extension=php_sockets.dll ;extension=php_sybase_ct.dll ;extension=php_w32api.dll ;extension=php_xmlrpc.dll ;extension=php_xslt.dll ;extension=php_yaz.dll ;extension=php_zip.dll ;;;;;;;;;;;;;;;;;;; ; Module Settings ; ;;;;;;;;;;;;;;;;;;; [Syslog] ; Whether or not to define the various syslog variables (e.g. $LOG_PID, ; $LOG_CRON, etc.). Turning it off is a good idea performance-wise. In ; runtime, you can define these variables by calling define_syslog_variables(). define_syslog_variables = Off [mail function] ; For Win32 only. SMTP = 192.168.2.3 ; For Win32 only. ; sendmail_from = ; For Unix only. You may supply arguments as well (default: "sendmail -t -i"). ;sendmail_path = [Java] ;java.class.path = .\php_java.jar ;java.home = c:\jdk ;java.library = c:\jdk\jre\bin\hotspot\jvm.dll ;java.library.path = .\ [SQL] sql.safe_mode = Off [ODBC] ;odbc.default_db = Not yet implemented ;odbc.default_user = Not yet implemented ;odbc.default_pw = Not yet implemented ; Allow or prevent persistent links. odbc.allow_persistent = On ; Check that a connection is still valid before reuse. odbc.check_persistent = On ; Maximum number of persistent links. -1 means no limit. odbc.max_persistent = -1 ; Maximum number of links (persistent + non-persistent). -1 means no limit. odbc.max_links = -1 ; Handling of LONG fields. Returns number of bytes to variables. 0 means ; passthru. odbc.defaultlrl = 4096 ; Handling of binary data. 0 means passthru, 1 return as is, 2 convert to char. ; See the documentation on odbc_binmode and odbc_longreadlen for an explanation ; of uodbc.defaultlrl and uodbc.defaultbinmode odbc.defaultbinmode = 1 [MySQL] ; Allow or prevent persistent links. mysql.allow_persistent = On ; Maximum number of persistent links. -1 means no limit. mysql.max_persistent = -1 ; Maximum number of links (persistent + non-persistent). -1 means no limit. mysql.max_links = -1 ; Default port number for mysql_connect(). If unset, mysql_connect() will use ; the $MYSQL_TCP_PORT or the mysql-tcp entry in /etc/services or the ; compile-time value defined MYSQL_PORT (in that order). Win32 will only look ; at MYSQL_PORT. mysql.default_port = ; Default socket name for local MySQL connects. If empty, uses the built-in ; MySQL defaults. mysql.default_socket = ; Default host for mysql_connect() (doesn't apply in safe mode). mysql.default_host = ; Default user for mysql_connect() (doesn't apply in safe mode). mysql.default_user = ; Default password for mysql_connect() (doesn't apply in safe mode). ; Note that this is generally a *bad* idea to store passwords in this file. ; *Any* user with PHP access can run 'echo get_cfg_var("mysql.default_password") ; and reveal this password! And of course, any users with read access to this ; file will be able to reveal the password as well. mysql.default_password = ; Maximum time (in secondes) for connect timeout. -1 means no limimt mysql.connect_timeout = -1 ; Trace mode. When trace_mode is active (=On), warnings for table/index scans and ; SQL-Erros will be displayed. mysql.trace_mode = Off [mSQL] ; Allow or prevent persistent links. msql.allow_persistent = On ; Maximum number of persistent links. -1 means no limit. msql.max_persistent = -1 ; Maximum number of links (persistent+non persistent). -1 means no limit. msql.max_links = -1 [PostgresSQL] ; Allow or prevent persistent links. pgsql.allow_persistent = On ; Detect broken persistent links always with pg_pconnect(). Need a little overhead. pgsql.auto_reset_persistent = Off ; Maximum number of persistent links. -1 means no limit. pgsql.max_persistent = -1 ; Maximum number of links (persistent+non persistent). -1 means no limit. pgsql.max_links = -1 ; Ignore PostgreSQL backends Notice message or not. pgsql.ignore_notice = 0 ; Log PostgreSQL backends Noitce message or not. ; Unless pgsql.ignore_notice=0, module cannot log notice message. pgsql.log_notice = 0 [Sybase] ; Allow or prevent persistent links. sybase.allow_persistent = On ; Maximum number of persistent links. -1 means no limit. sybase.max_persistent = -1 ; Maximum number of links (persistent + non-persistent). -1 means no limit. sybase.max_links = -1 ;sybase.interface_file = "/usr/sybase/interfaces" ; Minimum error severity to display. sybase.min_error_severity = 10 ; Minimum message severity to display. sybase.min_message_severity = 10 ; Compatability mode with old versions of PHP 3.0. ; If on, this will cause PHP to automatically assign types to results according ; to their Sybase type, instead of treating them all as strings. This ; compatability mode will probably not stay around forever, so try applying ; whatever necessary changes to your code, and turn it off. sybase.compatability_mode = Off [Sybase-CT] ; Allow or prevent persistent links. sybct.allow_persistent = On ; Maximum number of persistent links. -1 means no limit. sybct.max_persistent = -1 ; Maximum number of links (persistent + non-persistent). -1 means no limit. sybct.max_links = -1 ; Minimum server message severity to display. sybct.min_server_severity = 10 ; Minimum client message severity to display. sybct.min_client_severity = 10 [dbx] ; returned column names can be converted for compatibility reasons ; possible values for dbx.colnames_case are ; "unchanged" (default, if not set) ; "lowercase" ; "uppercase" ; the recommended default is either upper- or lowercase, but ; unchanged is currently set for backwards compatibility dbx.colnames_case = "unchanged" [bcmath] ; Number of decimal digits for all bcmath functions. bcmath.scale = 0 [browscap] ;browscap = extra/browscap.ini [Informix] ; Default host for ifx_connect() (doesn't apply in safe mode). ifx.default_host = ; Default user for ifx_connect() (doesn't apply in safe mode). ifx.default_user = ; Default password for ifx_connect() (doesn't apply in safe mode). ifx.default_password = ; Allow or prevent persistent links. ifx.allow_persistent = On ; Maximum number of persistent links. -1 means no limit. ifx.max_persistent = -1 ; Maximum number of links (persistent + non-persistent). -1 means no limit. ifx.max_links = -1 ; If on, select statements return the contents of a text blob instead of its id. ifx.textasvarchar = 0 ; If on, select statements return the contents of a byte blob instead of its id. ifx.byteasvarchar = 0 ; Trailing blanks are stripped from fixed-length char columns. May help the ; life of Informix SE users. ifx.charasvarchar = 0 ; If on, the contents of text and byte blobs are dumped to a file instead of ; keeping them in memory. ifx.blobinfile = 0 ; NULL's are returned as empty strings, unless this is set to 1. In that case, ; NULL's are returned as string 'NULL'. ifx.nullformat = 0 [Session] ; Handler used to store/retrieve data. session.save_handler = files ; Argument passed to save_handler. In the case of files, this is the path ; where data files are stored. Note: Windows users have to change this ; variable in order to use PHP's session functions. ; As of PHP 4.0.1, you can define the path as: ; session.save_path = "N;/path" ; where N is an integer. Instead of storing all the session files in ; /path, what this will do is use subdirectories N-levels deep, and ; store the session data in those directories. This is useful if you ; or your OS have problems with lots of files in one directory, and is ; a more efficient layout for servers that handle lots of sessions. ; NOTE 1: PHP will not create this directory structure automatically. ; You can use the script in the ext/session dir for that purpose. ; NOTE 2: See the section on garbage collection below if you choose to ; use subdirectories for session storage session.save_path = "C:\Program Files\php4\sessions" ; Whether to use cookies. session.use_cookies = 1 ; This option enables administrators to make their users invulnerable to ; attacks which involve passing session ids in URLs; defaults to 0. ; session.use_only_cookies = 1 ; Name of the session (used as cookie name). session.name = PHPSESSID ; Initialize session on request startup. session.auto_start = 0 ; Lifetime in seconds of cookie or, if 0, until browser is restarted. session.cookie_lifetime = 0 ; The path for which the cookie is valid. session.cookie_path = / ; The domain for which the cookie is valid. session.cookie_domain = ; Handler used to serialize data. php is the standard serializer of PHP. session.serialize_handler = php ; Define the probability that the 'garbage collection' process is started ; on every session initialization. ; The probability is calculated by using gc_probability/gc_divisor, ; e.g. 1/100 means there is a 1 percent chance that the GC process starts ; on each request. session.gc_probability = 1 session.gc_divisor = 100 ; After this number of seconds, stored data will be seen as 'garbage' and ; cleaned up by the garbage collection process. session.gc_maxlifetime = 1440 ; NOTE: If you are using the subdirectory option for storing session files ; (see session.save_path above), then garbage collection does *not* ; happen automatically. You will need to do your own garbage ; collection through a shell script, cron entry, or some other method. ; For example, the following script would is the equivalent of ; setting session.gc_maxlifetime to 1440 (1440 seconds = 24 minutes): ; cd /path/to/sessions; find -cmin +24 | xargs rm ; PHP 4.2 and less have an undocumented feature/bug that allows you to ; to initialize a session variable in the global scope, albeit register_globals ; is disabled. PHP 4.3 and later will warn you, if this feature is used. ; You can disable the feature and the warning seperately. At this time, ; the warning is only displayed, if bug_compat_42 is enabled. session.bug_compat_42 = 0 session.bug_compat_warn = 0 ; Check HTTP Referer to invalidate externally stored URLs containing ids. ; HTTP_REFERER has to contain this substring for the session to be ; considered as valid. session.referer_check = ; How many bytes to read from the file. session.entropy_length = 0 ; Specified here to create the session id. session.entropy_file = ;session.entropy_length = 16 ;session.entropy_file = /dev/urandom ; Set to {nocache,private,public,} to determine HTTP caching aspects ; or leave this empty to avoid sending anti-caching headers. session.cache_limiter = nocache ; Document expires after n minutes. session.cache_expire = 180 ; trans sid support is disabled by default. ; Use of trans sid may risk your users security. ; Use this option with caution. ; - User may send URL contains active session ID ; to other person via. email/irc/etc. ; - URL that contains active session ID may be stored ; in publically accessible computer. ; - User may access your site with the same session ID ; always using URL stored in browser's history or bookmarks. session.use_trans_sid = 0 ; The URL rewriter will look for URLs in a defined set of HTML tags. ; form/fieldset are special; if you include them here, the rewriter will ; add a hidden <input> field with the info which is otherwise appended ; to URLs. If you want XHTML conformity, remove the form entry. ; Note that all valid entries require a "=", even if no value follows. url_rewriter.tags = "a=href,area=href,frame=src,input=src,form=,fieldset=" [MSSQL] ; Allow or prevent persistent links. mssql.allow_persistent = On ; Maximum number of persistent links. -1 means no limit. mssql.max_persistent = -1 ; Maximum number of links (persistent+non persistent). -1 means no limit. mssql.max_links = -1 ; Minimum error severity to display. mssql.min_error_severity = 10 ; Minimum message severity to display. mssql.min_message_severity = 10 ; Compatability mode with old versions of PHP 3.0. mssql.compatability_mode = Off ; Valid range 0 - 2147483647. Default = 4096. ;mssql.textlimit = 4096 ; Valid range 0 - 2147483647. Default = 4096. ;mssql.textsize = 4096 ; Limits the number of records in each batch. 0 = all records in one batch. ;mssql.batchsize = 0 ; Use NT authentication when connecting to the server mssql.secure_connection = Off ; Specify max number of processes. Default = 25 ;mssql.max_procs = 25 [Assertion] ; Assert(expr); active by default. ;assert.active = On ; Issue a PHP warning for each failed assertion. ;assert.warning = On ; Don't bail out by default. ;assert.bail = Off ; User-function to be called if an assertion fails. ;assert.callback = 0 ; Eval the expression with current error_reporting(). Set to true if you want ; error_reporting(0) around the eval(). ;assert.quiet_eval = 0 [Ingres II] ; Allow or prevent persistent links. ingres.allow_persistent = On ; Maximum number of persistent links. -1 means no limit. ingres.max_persistent = -1 ; Maximum number of links, including persistents. -1 means no limit. ingres.max_links = -1 ; Default database (format: [node_id::]dbname[/srv_class]). ingres.default_database = ; Default user. ingres.default_user = ; Default password. ingres.default_password = [Verisign Payflow Pro] ; Default Payflow Pro server. pfpro.defaulthost = "test-payflow.verisign.com" ; Default port to connect to. pfpro.defaultport = 443 ; Default timeout in seconds. pfpro.defaulttimeout = 30 ; Default proxy IP address (if required). ;pfpro.proxyaddress = ; Default proxy port. ;pfpro.proxyport = ; Default proxy logon. ;pfpro.proxylogon = ; Default proxy password. ;pfpro.proxypassword = [Sockets] ; Use the system read() function instead of the php_read() wrapper. sockets.use_system_read = On [com] ; path to a file containing GUIDs, IIDs or filenames of files with TypeLibs ;com.typelib_file = ; allow Distributed-COM calls ;com.allow_dcom = true ; autoregister constants of a components typlib on com_load() ;com.autoregister_typelib = true ; register constants casesensitive ;com.autoregister_casesensitive = false ; show warnings on duplicate constat registrations ;com.autoregister_verbose = true [Printer] ;printer.default_printer = "" [mbstring] ; language for internal character representation. ;mbstring.language = Japanese ; internal/script encoding. ; Some encoding cannot work as internal encoding. ; (e.g. SJIS, BIG5, ISO-2022-*) ;mbstring.internal_encoding = EUC-JP ; http input encoding. ;mbstring.http_input = auto ; http output encoding. mb_output_handler must be ; registered as output buffer to function ;mbstring.http_output = SJIS ; enable automatic encoding translation accoding to ; mbstring.internal_encoding setting. Input chars are ; converted to internal encoding by setting this to On. ; Note: Do _not_ use automatic encoding translation for ; portable libs/applications. ;mbstring.encoding_translation = Off ; automatic encoding detection order. ; auto means ;mbstring.detect_order = auto ; substitute_character used when character cannot be converted ; one from another ;mbstring.substitute_character = none; ; overload(replace) single byte functions by mbstring functions. ; mail(), ereg(), etc are overloaded by mb_send_mail(), mb_ereg(), ; etc. Possible values are 0,1,2,4 or combination of them. ; For example, 7 for overload everything. ; 0: No overload ; 1: Overload mail() function ; 2: Overload str*() functions ; 4: Overload ereg*() functions ;mbstring.func_overload = 0 [FrontBase] ;fbsql.allow_persistent = On ;fbsql.autocommit = On ;fbsql.default_database = ;fbsql.default_database_password = ;fbsql.default_host = ;fbsql.default_password = ;fbsql.default_user = "_SYSTEM" ;fbsql.generate_warnings = Off ;fbsql.max_connections = 128 ;fbsql.max_links = 128 ;fbsql.max_persistent = -1 ;fbsql.max_results = 128 ;fbsql.batchSize = 1000 [Crack] ; Modify the setting below to match the directory location of the cracklib ; dictionary files. Include the base filename, but not the file extension. ; crack.default_dictionary = "c:\php\lib\cracklib_dict" [exif] ; Exif UNICODE user comments are handled as UCS-2BE/UCS-2LE and JIS as JIS. ; With mbstring support this will automatically be converted into the encoding ; given by corresponding encode setting. When empty mbstring.internal_encoding ; is used. For the decode settings you can distinguish between motorola and ; intel byte order. A decode setting cannot be empty. ;exif.encode_unicode = ISO-8859-15 ;exif.decode_unicode_motorola = UCS-2BE ;exif.decode_unicode_intel = UCS-2LE ;exif.encode_jis = ;exif.decode_jis_motorola = JIS ;exif.decode_jis_intel = JIS ; Local Variables: ; tab-width: 4 ; End: [mmcache] zend_extension_ts="C:\Program Files\php4\turck-mmcache\mmcache.dll" ; Amount of shared memory in MB to allocate for cache mmcache.shm_size="16" mmcache.cache_dir="C:\Program Files\php4\turck-mmcache\temp" mmcache.enable="1" mmcache.optimizer="1" mmcache.check_mtime="1" mmcache.debug="0" mmcache.filter="" mmcache.shm_max="5120000" mmcache.shm_ttl="3600" mmcache.shm_prune_period="0" [Zend] ;;zend_optimizer.optimization_level=15 zend_extension_ts="C:\Program Files\php4\Zend\lib\ZendOptimizer.dll" Tag: Hacked by tugr@ Tag: 352537
  - 5
    - IIS ODBC Logging causing problems with ASP.Net SQLClient database access I run into a strange problem today while enableding ODBC SQL logging on my IIS Server. Once the logging was enabled, and working fine, my two ASP.Net Applications could no longer connect to the database. I got an Access Denied or Server does not exist error. The moment I set the logging back to the normal file based logging, the applications worked again. I noticed in the stack trace of the ASP.Net errors that connection pooling was showing up. Could the ODBC logging, via a System DSN, somehow be interfering with the .Net SQLClient access? Strange thing is that all of the applications, and the logging, use different usernames, so a connection from the pool should not be used anways. I'm stumped on this one, any guidance would be appreciated. Thanks Rob Tag: Hacked by tugr@ Tag: 352536
  - 6
    - Session Timeout we have an our intranet running on Windows 2000. We want to move to 2003 and have set up our test internet server with 2003. For some of our intranet "sites" we have our timeout set for 12 hours, others, 10 minutes and others 20 minutes on or 2000 server through the session.timeout variable in our ASP pages. On the 2003 server no matter what we set the timeput value to, it always times out after 20 minutes. We have even tried to set the timeout in IIS to 8 hours (both the site and top level) but it still timesout after 20 minutes. No matter what we do, after 20 minutes our session is gone. 2000 works without issue. I can set it to whatever I want through ASP. How do I get 2003 to work? Everything I have read says what I am doing and did previously should work fine. HELP! Thanks. Tag: Hacked by tugr@ Tag: 352530
  - 7
    - Multiple web identities / IIS6 I am trying to set-up at least two identities for the same site. The default domain name is for example name.com. I have also added www.name.com as a second identity. When I type in browser name.com, it connects to the site with no problems, but when I type www.name.com IIS requests login and password. Why is that? Both names (identities) are under one web site that points to one directory. The permissions are obviously ok because IIS does not requests login and password when I come to name.com. Any sugestions? Thanks! m. Tag: Hacked by tugr@ Tag: 352529
  - 8
    - WebDAV domain authentication We have just migrated from Novell to AD and I have enabled WebDAV for our users to remotely access some of our filesystem. It works well, but I'm finding that no matter how much I point users to my custom instructions many of them can't seem to remember to place the "domain\" in front of their usernames when authenticating. We only have one domain, so I was wondering if there is a way to remove this requirement so taht they only enter their usernames? Thanks for you help. Tag: Hacked by tugr@ Tag: 352528
  - 9
    - Https setup Question I'd like to create a secure section on a simple website I'm working on using IIS and ASP.NET. My understanding is that I need to setup https on the website to do this. And that this requires some kind of certificate saying my website is who it claims to be. I don't really understand the process you go thru to do all this. It seems that the only way to get one if these certificates however is to request one from a CA and pay them for it. Is this really necessary? Is there someway to just self sign my certificate. Obviously I'm no authority so It's not very trust worthy but it seems like overkill to use a real CA, but I don't know if I have any other options. Any help would be appreciated. Thanks. Tag: Hacked by tugr@ Tag: 352527
  - 10
    - FTP IIS 6 High Ports. We made some changes and started port filtering. The server is now configured to only allow the use of ports: 20, 21, 80, 443, 110 and 125. After these changes we can no longer use "passive FTP". I'm thinking it's the random high port assigned by the server based on information I have found on MS. The article I found states that the high ports can be configured in the IIS metabase.xml file. (no info provided as to how) I can't find anything related to high ports in the metabase file. Does this sound like it would be causing the problem? How do I go about configuring the high ports allowed in the meatbase? Thanks Tag: Hacked by tugr@ Tag: 352526
  - 11
    - IIS Tools Hey, Are there IIS Administration tools except the default one? Thanks ahead --Ram Tag: Hacked by tugr@ Tag: 352524
  - 12
    - Virtual Directory / Enter Network Password I created a virtual directory call 'testlistbills' the path is: \\nwasql1\nwadisk3\testnightbatch. The directory exists on a NT4 domain controller. The web server is Windows 2000 / IIS 5. The 'connect as' is a valid domain user and password. When I try to access a document (i.e. https://../TestListBills/2004/0423/REPORTS/ListBill-Client%2300002874-BDD20040507.RTF) the system prompts me to enter the 'Network Password'. I developed and tested this app on my local PC with no problem. When I view the virtual directory through 'Computer Management' I can expand the 'TestListbills' tree and see the files. Did I miss something here? I setup virtual directory on the web server the same way I set it up my pc. Thanks for any help. Tag: Hacked by tugr@ Tag: 352520
  - 13
    - IIS5 on Server 2000 SP3 - memory and thread question We have a box in the field that has been experience repeated problems - about every 7 - 8 days. It is a Server 2000 SP3 box running IIS. This web server is running both .NET and Java Applications. The Java applications are hosting by Servlet Exec 5 hotfix 8 ISAPI. We have taken numerous IISSTATE dumps - some have been posted to this newsgroup, but they only show various numbers of jvm-related threads in a wait state. Below, we have captured another iisstate dump that has two threads (8 and 9) with both kernel and user mode times above 1 hour. Is it normal for an HTTP Listener thread to have this much time? I assume if a thread is idle, then that means the time metrics should not be increasing - is that correct? We are trying to get the customer to go to SP4, and they did get a Dr. Watson, so I am attempting to retrieve that. Any help or suggestions is greatly appreciated. Thanks, -- Bob Sr. Microsoft Architect Lighthammer Software ======================= Thread ID: 8 System Thread ID: 8ac Kernel Time: 1:13:13.312 User Time: 1:41:26.890 Thread Type: HTTP Listener # ChildEBP RetAddr 00 0108ff50 7c573c73 ntdll!ZwRemoveIoCompletion+0xb 01 0108ff7c 6d7021b4 KERNEL32!GetQueuedCompletionStatus+0x27 02 0108ffb4 7c57438b ISATQ!AtqPoolThread+0x40 03 0108ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 9 System Thread ID: 828 Kernel Time: 1:7:27.906 User Time: 1:39:6.531 *** WARNING: Unable to verify checksum for *** ERROR: Symbol file could not be found. Defaulted to export symbols for - *** WARNING: Unable to verify checksum for e:\Intranet\Scripts\ServletExec_ISAPI.dll *** ERROR: Symbol file could not be found. Defaulted to export symbols for e:\Intranet\Scripts\ServletExec_ISAPI.dll - Thread Type: HTTP Listener # ChildEBP RetAddr 00 010cea20 7c573b28 ntdll!ZwWaitForSingleObject+0xb 01 010cea48 7c573b50 KERNEL32!WaitForSingleObjectEx+0x71 02 010cea58 080a3983 KERNEL32!WaitForSingleObject+0xf WARNING: Stack unwind information not available. Following frames may be wrong. 03 010ceaa4 0807b2b8 jvm!JVM_FindSignal+0x1670e 04 010ceb5c 10001f84 jvm!JNI_GetCreatedJavaVMs+0xf8 05 010ceb70 10001e6d ServletExec_ISAPI+0x1f84 06 010cebb0 10006044 ServletExec_ISAPI+0x1e6d 07 010cfc48 65f0354f ServletExec_ISAPI!HttpFilterProc+0x344 08 010cfc70 65f034bc w3svc!FILTER_LIST::NotifyFilters+0x9d 09 010cfca4 65f02cad w3svc!HTTP_FILTER::NotifyPreProcHeaderFilters+0x3e 0a 010cfcfc 65f02ac1 w3svc!HTTP_REQUEST::Parse+0x372 0b 010cfd40 65f029b5 w3svc!HTTP_REQ_BASE::OnCompleteRequest+0x28 0c 010cfd80 65f028f8 w3svc!HTTP_REQ_BASE::UnWrapRequest+0x1e6 0d 010cfda0 65f027b3 w3svc!HTTP_REQ_BASE::OnFillClientReq+0x6c 0e 010cff18 65f020d7 w3svc!HTTP_REQUEST::DoWork+0x8b 0f 010cff38 65f093eb w3svc!CLIENT_CONN::DoWork+0x1aa 10 010cff4c 6d701394 w3svc!W3Completion+0x43 11 010cff80 6d702203 ISATQ!AtqpProcessContext+0x262 12 010cffb4 7c57438b ISATQ!AtqPoolThread+0x1a8 13 010cffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 13 System Thread ID: a7c Kernel Time: 0:0:5.875 User Time: 0:59:57.468 Thread Type: Other # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 243cfc20 0804b442 jvm+0x55ec 01 2002ffe8 00000000 jvm+0x4b442 Thread ID: 14 System Thread ID: ba8 Kernel Time: 0:0:4.281 User Time: 0:0:36.343 Thread Type: Other # ChildEBP RetAddr 00 2440fbd0 7c573b28 ntdll!ZwWaitForSingleObject+0xb 01 2440fbf8 7c573b50 KERNEL32!WaitForSingleObjectEx+0x71 02 2440fc08 080a7554 KERNEL32!WaitForSingleObject+0xf WARNING: Stack unwind information not available. Following frames may be wrong. 03 2440fc54 080c22e7 jvm!JVM_FindSignal+0x1a2df 04 2440fc6c 08086911 jvm!JVM_RegisterPerfMethods+0x13536 05 2440fc8c 017381a6 jvm!JVM_MonitorWait+0x4d 06 2440fcc0 01a1ccf0 0x17381a6 07 2440fd00 0178d300 0x1a1ccf0 08 2440fd30 017301ae 0x178d300 09 2440fd58 0807120c 0x17301ae 0a 2440fdd8 080ac134 jvm+0x7120c 0b 2440fe1c 08071119 jvm!JVM_FindSignal+0x1eebf 0c 2440fe38 08070e15 jvm+0x71119 0d 2440fe70 08070e4e jvm+0x70e15 0e 2440feec 08089c29 jvm+0x70e4e 0f 2440ff40 080cfc5c jvm!JVM_StartThread+0x191 10 2440ff6c 080cfc2a jvm!JVM_RegisterPerfMethods+0x20eab 11 2440ff80 780060ce jvm!JVM_RegisterPerfMethods+0x20e79 12 2440ffb4 7c57438b MSVCRT!_beginthreadex+0xca 13 2440ffec 00000000 KERNEL32!BaseThreadStart+0x52 Tag: Hacked by tugr@ Tag: 352519
  - 14
    - Strange log file I checked the following location C:\WINDOWS\system32\Logfiles\W3SVC1 for log files and see that about once a day a new log file is created and here how it looks like: #Software: Microsoft Internet Information Services 5.1 #Version: 1.0 #Date: 2005-01-04 06:26:24 #Fields: date time c-ip cs-method cs-uri-stem sc-status cs(User-Agent) 2005-01-04 06:26:24 24.13.91.141 SEARCH /?ÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉ ÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉ ÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉ ÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉ ÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉ ÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉ ÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉ ÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉ ÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉ ÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉ ÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉ ÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉ ÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉ ÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉ ÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉ ÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉ ÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉ ÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉ ÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉ ÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉ ÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉ ÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉ ÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉ ÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉ ÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉ ÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉ ÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉ ÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉ ÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉÉ???????????????????????????????????????????????????? ???????????????????????????????????????????????????????????????????????????? ???????????????????????????????????????????????????????????????????????????? ???????????????????????????????????????????????????????????????????????????? ???????????????????????????????????????????????????????????????????????????? ???????????????????????????????????????????????????????????????????????????? ???????????????????????????????????????????????????????????????????????????? ???????????????????????????????????????????????????????????????????????????? ???????????????????????????????????????????????????????????????????????????? ???????????????????????????????????????????????????????????????????????????? ???????????????????????????????????????????????????????????????????????????? ???????????????????????????????????????????????????????????????????????????? ???????????????????????????????????????????????????????????????????????????? ???????????????????????????????????????????????????????????????????????????? ???????????????????????????????????????????????????????????????????????????? ???????????????????????????????????????????????????????????????????????????? ???????????????????????????????????????????????????????????????????????????? ???????????????????????????????????????????????????????????????????????????? ???????????????????????????????????????????????????????????????????????????? ???????????????????????????????????????????????????????????????????????????? ???????????????????????????????????????????????????????????????????????????? ???????????????????????????????????????????????????????????????????????????? ???????????????????????????????????????????????????????????????????????????? ???????????????????????????????????????????????????????????????????????????? ???????????????????????????????????????????????????????????????????????????? ???????????????????????????????????????????????????????????????????? 404 - 2005-01-04 07:34:43 24.13.1.251 SEARCH /?±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±± ±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±± ±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±± ±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±± ±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±± ±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±± ±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±± ±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±± ±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±± ±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±± ±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±± ±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±± ±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±± ±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±± ±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±± ±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±± ±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±± ±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±± ±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±± ±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±± ±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±± ±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±± ±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±± ±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±± ±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±± ±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±± ±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±± ±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±± ±±±±±±±±±±±±???????????????????????????????????????????????????? ???????????????????????????????????????????????????????????????????????????? ???????????????????????????????????????????????????????????????????????????? ???????????????????????????????????????????????????????????????????????????? ???????????????????????????????????????????????????????????????????????????? ???????????????????????????????????????????????????????????????????????????? ???????????????????????????????????????????????????????????????????????????? ???????????????????????????????????????????????????????????????????????????? ???????????????????????????????????????????????????????????????????????????? ???????????????????????????????????????????????????????????????????????????? ???????????????????????????????????????????????????????????????????????????? ???????????????????????????????????????????????????????????????????????????? ???????????????????????????????????????????????????????????????????????????? ???????????????????????????????????????????????????????????????????????????? ???????????????????????????????????????????????????????????????????????????? ???????????????????????????????????????????????????????????????????????????? ???????????????????????????????????????????????????????????????????????????? ???????????????????????????????????????????????????????????????????????????? ???????????????????????????????????????????????????????????????????????????? ???????????????????????????????????????????????????????????????????????????? ???????????????????????????????????????????????????????????????????????????? ???????????????????????????????????????????????????????????????????????????? ???????????????????????????????????????????????????????????????????????????? ???????????????????????????????????????????????????????????????????????????? ???????????????????????????????????????????????????????????????????????????? ???????????????????????????????????????????????????????????????????? 404 - MS Word says it's a Korean charset. Why do I have such log files? Tag: Hacked by tugr@ Tag: 352517
  - 15
    - Cannot Access/Download Word Documents via SSL Sorry if too much information, wanted to cover my bases. Running Windows 2k Server/ IIS 5.1 I have a website configured with an SSL cert and 'Require Secure Channel' is checked - the server only responds to https requests. URL Scan is installed, but set for UseDenyExtensions and .doc isn't denied. MIME maps are configured properly at the IIS level. IISLockdown was run when the server was installed (months ago). Under the top-level website is a virtual directory which provides unauthenticated access to a set of word documents via a static html links page. (The top-level website requires forms authentication for other services). When a user clicks on a link to a word document via IE 5+ (I'm testing WinXPProSP2/IE 6 - all patches) they get the standard 'Do you want to open or save this file' dialog, but the document name is written as 'mydocument_doc' from a client machine or 'mydocument.doc' from the webserver. After clicking open or save, i get the 'IE cannot download mydocument.doc from www.mysite.org.' message. *** If i turn off the 'Require Secure Channel' option on the top-level site, everything works peachy. *** Thanks in advance for your help and advice. Sean. Tag: Hacked by tugr@ Tag: 352516
  - 16
    - software auto update on IIS Hi, I have installed SUS on a dedicated IIS server. It worked fine until one day on Nov 2004. On the sync log. it says: Error writing to the content folder 'f:\SUS\content\cabs'. (Error 0x80070003: The system cannot find the path specified.) f: drive is a network drive on another server. But I have tested the connection that is fine. Can anyone help me solve this problem? Thanks a lot. AT Tag: Hacked by tugr@ Tag: 352515
  - 17
    - IIS 5.0 on Windows XP Just installed IIS 5.0 on my Windows XP Home Edition and it is running ok. Only problem is I cannot get my IE to connect to the default web site on my computer I have tried http://localhost did not work http://tgwk001/test.htm did not work tgwk001 is my workstation name which is what iis used * tgwk001 using mmc. tried different ports currently I am using 80 tried 8080 81 etc no luck. I also tried using my ip address of my pc and that also did not work. Any ideas Thanks Tom Tag: Hacked by tugr@ Tag: 352507
  - 18
    - Custom Logging Hi there, I have an SPS 2003 portal solution and we are attempting to use WebTrends to do analysis. The problem at the moment is that the SPS Indexer uses an account which obviously gets logged to an IIS Log file. What I am looking for is a methodoly to drop the entries in the IIS Log file before it get's shipped over to the WebTrends analysis server. That way, I don't analyze that the indexer is obviously creating entires within the portal (and thus have this count as page views within WebTrends) Is the Log Parser contained in the IIS Resource kit of any help here? -- Nick W GamerTag: StalkerofHades nfwilson@nospam.hotmail.com Tag: Hacked by tugr@ Tag: 352499
  - 19
    - WebDAV folders hang on client Hey folks, Not sure if there's something odd in my implementation of WebDAV in IIS6, but clients explorer view of the few WebDAV folders I have is extremely slow and appears to hang on download or upload of large files or many files at once. Is this typical behavior? For example, client systems are unresponsive until these large uploads/downloads are complete. Dave Tag: Hacked by tugr@ Tag: 352491
  - 20
    - Frontpage extensions I am studying for my Microsoft .Net certification. One of the books is instructing me to configure an IIS virtual folder for Frontpage Server Extensions. They also refer to it as a subweb. I am supposed to be able to open IIS, highlight the virtual folder and right-click the mouse. I should then see an option for 'Server Extensions Web'. However, I don't have this option. Tag: Hacked by tugr@ Tag: 352489
  - 21
    - Is ISAPI as low level as you can get using IIS? Or is there another method that is even closer to IIS core while ISAPI is only a wrapper? Tag: Hacked by tugr@ Tag: 352487
  - 22
    - Welcome message not displayed in Windows XP If you set up a FTP site under IIS and enter a welcome message, that message will be displayed if browsing to the FTP site using IE with Windows 2000 but not with Windows XP Pro. Why is this? Can I somehow display the welcome message with IE/XP? Tag: Hacked by tugr@ Tag: 352480
  - 23
    - Ms Managment Console IIS aSince I install the SP2, I can't rech the managment of IIS in the Microsoft Managment Console. If I double-click the file c:\windows\System32\inetsrv\iis.msc, I obtain an error "Error during intialisation of the component." or somthing like that (in french the error is 'Echec de l'initialisation du composant logiciel enfichable'.) Thanks to help me if anybody knows this bug. Henri Tag: Hacked by tugr@ Tag: 352477
  - 24
    - ASP createobject statement cause IIS fail Hi all, I have an application writen by ASP running on a window2003 + IIS6.0 box. I will log every page the visitor have visited in my own database using ODBC, however, I found that sometime the IIS will crash and I alway find the same error message in the event log when the crash happen, the message is "Error: File /crm/source/client_profile.asp CreateObject Exception. The CreateObject of '(null)' caused exception C0000005." So I search in the ASP page and find that there is only 2 place I use createobject statement, that is Set db_conn = Server.CreateObject("ADODB.Connection") and Set db_rs = Server.CreateObject("ADODB.recordset") I don't know why this createobject statement will result an exception. And this exception will not alway happen, it will happen about 2-3 times a day. I have no idea but to restart the IIS to temporary solve the problem. Anyone encounter the similar problem ? Can anyone help? Thanks. ong Tag: Hacked by tugr@ Tag: 352474
  - 25
    - using host headers for multiple sites in IIS 6 Im trying to setup multiples sites using host headers. Im confused on if I'm supposed to be setting up host recoders or cname records in dns or lmhost files? If i am supposed to create these records can dns be running on the same server as IIS (web edition)? Tag: Hacked by tugr@ Tag: 352459
- Next
  - 1
    - IIS problem rendering files with .aspx extension Hello, I am having the following problem with IIS. When I try to access an ASP.NET file with .aspx extension using the URL http://localhost/foo.aspx the page appears in the browser source for the page with none of the <% %> tags or <asp: /> tags expanded. The page appears exactly as I wrote it without any server side processing applied to it. On the other hand, I can clearly see the results when I view the pages with Web Matrix. Does anyone know how I should configure Internet Information Server so that the .aspx file is actually compiled and rendered as HTML by the IIS server? What am I doing wrong? Thanks, Neil Tag: Hacked by tugr@ Tag: 352458
  - 2
    - why use SF_STATUS_REQ_FINISHED rather than SF_STATUS_REQ_FINISHED_ If iis indeed only uses SF_STATUS_REQ_FINISHED_KEEP_CONN if that option was negotiated in the connection and SF_STATUS_REQ_FINISHED if the option wasn't negoatiated when you reques SF_STATUS_REQ_FINISHED_KEEP_CONN, what scenarios would SF_STATUS_REQ_FINISHED be used at all instead of SF_STATUS_REQ_FINISHED_KEEP_CONN? Why not just use SF_STATUS_REQ_FINISHED_KEEP_CONN all times and let IIS handle the connection options? In addition what types of connections keeps the connection open? ssl? Tag: Hacked by tugr@ Tag: 352455
  - 3
    - changing output in SF_NOTIFY_SEND_RAW_DATA When handling SF_NOTIFY_SEND_RAW_DATA requests, do I have to reallocate memory for the headers to change the content-length if the size increases at all or is there an existing extra chunk of memory there in the headers? I only ask because I don't see any examples on the net that do allocate more memory in SF_NOTIFY_SEND_RESPONSE, only for the sending of the raw data. What if the existing content length is 99 bytes and Im adding 1000 bytes of output. I need to modify the content-length value to now be 1099 which has increased the length by two bytes, so do I need to allocatemem a new buffer in the handling of SF_NOTIFY_SEND_RESPONSE? Who frees this buffer, and if its me, where? Thanks! Tag: Hacked by tugr@ Tag: 352454
  - 4
    - IIS stability problem Hi all, Does anyone know where can I find some good technical acticle which detail describe the stability (ie, IIS can handler how much request per second)/scaleability or comparison between different web server product ? Thanks in advance ong Tag: Hacked by tugr@ Tag: 352452
  - 5
    - New web site not an option in menus I am using IIS 5.0 on Windows 2000 professional for development. When I right-click on the computer name from the IIS snap-in it does not give me the option to create a new web site. Any idea why that is? Do I have to be running Windows 2000 server or something? Thanks Tag: Hacked by tugr@ Tag: 352451
  - 6
    - IIS Virtual directory not working Hello, I took all of the following steps to configure Windows XP with IIS so that I can serve web pages from a virtual directory from one of my folders. Basically, here is what I did to install IIS, set up the server root directory, creating the virtual directory, and modifying my desktop to display file extensions for my own convenience. The problem is that while serving from the C:\Inetpub\wwwroot directory is working I am not able to serve from my virtual directory. The files i create are found but I get the following error message. Anyone know how to solve this problem? You are not authorized to view this page You do not have permission to view this directory or page using the credentials you supplied. Thanks, Neil --------------------------------------------------------------- IIS notes: Windows XP Pro: Installing and starting IIS: Start -> Control Panel -> Add or Remove Programs -> Add/Remove Windows Components -> Internet Information Services (IIS) -> Next -> ... http://localhost/ Setting up the server root directory: Start -> Run... -> inetmgr -> COMPUTER (local computer) -> Web Sites -> Default Web Site -> right click -> Properties -> Home Directory -> Local Path: c:\inetpub\wwwroot Configuring virtual directories (directories accessed as though under the server root): Start -> Run... -> inetmgr -> COMPUTER (local computer) -> Web Sites -> Default Web Site -> right click -> New -> Virtual Directory Displaying file extensions: Start -> Control Panel -> Appearance and Themes -> Folder Options -> View -> Hide extensions for known file types Tag: Hacked by tugr@ Tag: 352443
  - 7
    - Setup IIS 5.1 to run APS.NET Hi :-) How do I setup IIS 5.1 to run ASP.NT Win XP Pro SP1 I am testing my pages on Dreamweaver MX 2004 but they don't run, but they did when I had Web Matrix, which I have uninstaled. Thank you! Edison Tag: Hacked by tugr@ Tag: 352439
  - 8
    - IIS 6 on Win XP pro ? Hi :-) Is it possible to instal IIS 6 on Win xp pro, or only 5.1 Thanks Edison Queiroz Villela Tag: Hacked by tugr@ Tag: 352438
  - 9
    - IIS setting for EFS for asp.net user account Dear All, We had a strange observation on some customer lients where we deployed our ASP.Net application the server configuration is Windows 2000 server, IIS 5.1 /IIS 6.0, .net 1.1 SP1. After patch deployment of our application some folders that were created by our application had the encryption feature set on and our log files were also encrypted by EFS. Administrators were not able to read or copy the log files, as they were created by the ASP.Net user account...mysteriously after two days (perhaps a machine restart) the folders and files created by our application saved without encryption. Administrators claim to have not done anything...they want an explation for this behaviour...how did the encryption feature get set for the ASP.Net user account? and then again reset? Can someone please help... TALIA Many regards, Jack Tag: Hacked by tugr@ Tag: 352435
  - 10
    - Server.MapPath() works differently on IIS 6.0 compared to IIS 5.0 Hi I am running exactly the same ASP code on IIS 5.0 and IIS 6.0 I am calling Server.MapPath(), the parameter is a virtual path that includes a reference to a parent path ("Root/Files/../Config/"). 'Config' is a virtual directory under 'Root' which is also a virtual directory. 'Files' is a normal folder. Under IIS 5.0, the path is correctly mapped to the local path of the 'Config' virtual directory. Under IIS 6.0, the path gets mapped to "C:\WebSite\Root\Files\..\Config", ignoring the 'Config' virtual directory mapping. Is there a special setting I should be aware of in IIS 6.0 to ensure correct mapping of virtual paths? Many thanks Elie Grouchko Tag: Hacked by tugr@ Tag: 352434
  - 11
    - ISA 2004 and IIS 6 - same computer This is a multi-part message in MIME format. ------=_NextPart_000_0021_01C4EFFF.AFEF6FE0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Hi, Happy New Year to everyone! I am trying to publish a public web site on my server that has both ISA = 2004 and IIS6 installed, with two network cards. I have created a web = site that uses port 82, created a web publishing rule that uses the = internal IP address of the server, set the port to 82 in the Bridging = tab, and used the httpcfg to ensure that IIS is using the internal IP = address to listen. I have also modified the NTFS permissions to allow = the "IUSR_..." user to have "read" + "read/execute" + "list folder = content". However, when opening IE and typing www.mysite.com, I get the following = error message: a.. Error Code 10061: Connection refused=20 a.. Background: When the gateway or proxy server contacted the upstream = (Web) server, the connection was refused. This usually results from = trying to connect to a service that is inactive on the upstream server. Does anyone know what's wrong? Thanks. Mike ------=_NextPart_000_0021_01C4EFFF.AFEF6FE0 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML><HEAD> <META http-equiv=3DContent-Type content=3D"text/html; = charset=3Diso-8859-1"> <META content=3D"MSHTML 6.00.3790.218" name=3DGENERATOR> <STYLE></STYLE> </HEAD> <BODY bgColor=3D#ffffff> <DIV> <DIV><FONT face=3DArial size=3D2></FONT> </DIV> <DIV><FONT face=3DArial size=3D2>Hi,</FONT></DIV> <DIV><FONT face=3DArial size=3D2></FONT> </DIV> <DIV><FONT face=3DArial size=3D2>Happy New Year to = everyone!</FONT></DIV> <DIV><FONT face=3DArial size=3D2></FONT> </DIV> <DIV><FONT face=3DArial size=3D2>I am trying to publish a public web = site on my=20 server that has both ISA 2004 and IIS6 installed, with two network = cards. I have=20 created a web site that uses port 82, created a web publishing rule that = uses=20 the internal IP address of the server, set the port to 82 in the = Bridging tab,=20 and used the httpcfg to ensure that IIS is using the internal IP address = to=20 listen. I have also modified the NTFS permissions to allow the = "IUSR_..." user=20 to have "read" + "read/execute" + "list folder content".</FONT></DIV> <DIV><FONT face=3DArial size=3D2>However, when opening IE and typing <A=20 href=3D"http://www.mysite.com">www.mysite.com</A>, I get the following = error=20 message:</FONT></DIV> <DIV><FONT id=3DL_10061r_6=20 style=3D"FONT: 8pt/11pt verdana; COLOR: rgb(0,0,0); font-size-adjust: = none; font-stretch: normal"> </DIV> <DIV> <LI id=3DL_10061r_13>Error Code 10061: Connection refused=20 <LI id=3DL_10061r_14>Background: When the gateway or proxy server = contacted the=20 upstream (Web) server, the connection was refused. This usually results = from=20 trying to connect to a service that is inactive on the upstream=20 server.</FONT></LI></DIV> <DIV><FONT face=3DArial size=3D2></FONT> </DIV> <DIV><FONT face=3DArial size=3D2>Does anyone know what's = wrong?</FONT></DIV> <DIV><FONT face=3DArial size=3D2></FONT> </DIV> <DIV><FONT face=3DArial size=3D2>Thanks.</FONT></DIV> <DIV><FONT face=3DArial size=3D2>Mike</FONT></DIV> <DIV><FONT face=3DArial = size=3D2><BR></FONT> </DIV></DIV></BODY></HTML> ------=_NextPart_000_0021_01C4EFFF.AFEF6FE0-- Tag: Hacked by tugr@ Tag: 352432
  - 12
    - Default website and OWA I have a front end server running Win2k3, IIS 6.0, and OWA in which the default website quit working. I had to create a new website on this server and restore from backup the virtual directories in order to get OWA working again. Now the http virtual server won't start on this server in ESM, access to OWA works fine.The http exchange virtual server on the back end cluster is started and running ok. Being that the default http virtual server for the front end is crippled because it's attached to the default website, will creating a new http virtual server work with the new website or does any http virtual server created still revert to the default website? I'm looking for the best way to A) either somehow get the default website working again so that it and the default http virtual server will actually start and outlook web access can be accessed from there (I'm thinking now that maybe the virtual directories were the problem and that maybe if I restore them from the new website to the default website maybe it will start again) or B) create a new "http virtual server" in Exchange System Manager under administrative groups, protocols, http and see if it will point to the new website I created that is working now with OWA. I'd like to do this without bringing down OWA as it is working. The reason I need to do this is we'll be installing RPC over Http and forms based authentication and the http virtual server has to be running on both the front end and back end servers. Any help with this will be greatly appreciated, Thanks, -- mmcgowan ------------------------------------------------------------------------ Posted via http://www.webservertalk.com ------------------------------------------------------------------------ View this thread: http://www.webservertalk.com/message858732.html Tag: Hacked by tugr@ Tag: 352424
  - 13
    - Setup of IIS on Windows XP sp1 Hi guys, well, I already post this question in Windows Xp Networking and Web, but didn't knew about this news group :P. Anyways, I just want to know if there are guides about setting up an IIS server on Windows Xp for static web pages, like: picture gallery information site dumb stuff for my kids, they want to setup a site for the dog lol... The picture gallery is my idea, because I like photography, but the main problem is the space, my isp only gives me 5Mb, so I thought, why not setting up a server for myself at home. I got a small file server, with Windows Xp Sp1 and the IIS already installed, I got Front PAge 2003 in a laptop, right now making the web page, but the questions are: how do I upload the information? how do I get the IIS working? Thanks for the help. Tag: Hacked by tugr@ Tag: 352421
  - 14
    - Mixed IIS servers Can I have to web servers running on W2k with IIS 5 with NLB mode and add 2 additional W2003 and IIS6 make them all network balanced? Tag: Hacked by tugr@ Tag: 352419
  - 15
    - iis w2kserver Error Code: 80070035 Note: Get ADSI Printers Hi, Question: when i try to access the web printers from the web (not local web) I get the error at the bottom. i've seen this now on more w2k server installations. Anyone know how to fix this problem. thanks in advance, Martin ---------------------------------------------------- An error occurred processing your request. Error Code: 80070035 Note: Get ADSI Printers Tag: Hacked by tugr@ Tag: 352417
  - 16
    - Problems with Anonymous Access I am new to IIS but I am trying to set up a webserver on my Windows Server 2003 box. I have installed IIS per the instructions that are plastered all over the web. I want the website to be Anonymous Access only. I have enabled Anonymous Access but when a user goes to the site they are prompted for an authentication username and password. If they don't provide a valid one they do not get the site and instead get a 401.3 message. If I remove all other authentication methods besides AA, it does not work at all. How do I get this site to use AA - it is not. Thanks -Robert Tag: Hacked by tugr@ Tag: 352403
  - 17
    - IISADMPWD POSTING ISSUE I am trying to get the IISADMPWD functionality to work with a sharepoint website. I want IIS to redirect users to the aexp2b.asp page within the IISADMPWD virtual directory when their account has expired and they try to access the sharepoint website. I set the authpasswordurl metabase parameter to the "/iisadmpwd/aexp2b.asp" page and set the passwordchangeflags parameter to 0. I reset my own account to be expired and when I log into sharepoint I am correctly redirected to the aexp2b.asp page. However, when I go to reset my password and hit submit, the page never gets submitted to the achg.asp page. It just stays on the aexp2b.asp page and displays https://mydomain/iisadmpwd/achg.asp in the url. Also, if I go to IIS and browse to the aexp2b.asp page directly, I have no problems resetting my password. I only have this problem if I am redirected to aexp2b.asp by IIS. So, I guess what's different between IIS redirecting me to aexp2b.asp and me just going to IIS and browsing directly to the aexp2b.asp page. Something different is happening. I am running Windows 2003, IIS 6.0 and have a certificate installed. Any help would be appreciated. Tag: Hacked by tugr@ Tag: 352402
  - 18
    - Publish Visual Studio.net to remote IIS I am having a problem trying to publish to a remote IIS server. The server is configured with FrontPage extensions, Microsoft dotnet Framework and the Visual Studio Server components. When I publish the application to the remote server I get a Internal Server error 500. With IE friendly messages turned off I get system.runtime.remoting.remoteexception:Requested service not found accessing http://LocalHost/dev/testapp.rem?wsdl. However on the developer machine it works fine. Anyone have an idea what might cause this? Thanks Tag: Hacked by tugr@ Tag: 352400
  - 19
    - PUT returns Unauthorized; write permission granted I have WebDAV running on IIS6/Win2k3. I can read from it just fine, but if I try to write I get this error: "Logon failure: unknown user name or bad password." I sniffed the network traffic, and here's the exchange: Me: PUT file HTTP/1.1 Server: 401 Unauthorized, WWW-Authenticate Negotiate, WWW-Authenticate NTLM Me: PUT file HTTP/1.1, Authorization Negotiate <string> Server: 401 Unauthorized, WWW-Authenticate Negotiate, <other string> Like I said, reading works just fine, I do have NTFS write (e.g. I can work through Remote Desktop) and the IIS config is set to read & write. The only auth option I allow is Integrated Windows Authentication. What is going on? Tag: Hacked by tugr@ Tag: 352399
  - 20
    - MinFileBytesPerSec and Timer_MinBytesPerSecond Previous threads and Microsoft's online documentation do a good job explaining the intent of the MinFileBytesPerSec metabase key, but I have not yet seen any explanation of the seemingly common problem of high-speed downloads timing out. In my own test I could not download a 57 MB file, getting the Timer_MinBytesPerSecond error even though IE was reporting a 250 Kb/sec download rate. Is there an acknowledged http.sys bug in this area? I have not yet found any details on how it is testing the file-transfer speed. Could it be related to a dual-processor web server (e.g. a thread on one cpu sets up the timeout and does not see the file-transfer activity on the other cpu)? I have worked around the issue by setting MinFileBytesPerSec to 140 and the test file now downloads. I have no confidence, however, that 140 is the "right" number, since I know of no metric by which to set the value besides trial-and-error. Does anyone have a better answer? I cannot afford to waste time tracking this if it's an IIS issue, nor can I run web servers that fail on customer downloads. Thank you. ---Rob Tag: Hacked by tugr@ Tag: 352398
  - 21
    - Default SMTP domain How can I disable the default SMTP domain so that it can't receive E-mail. I am using the SMTP services as a gateway for other domains but I don't want the default to be able to receive E-mail. Thanks William Tag: Hacked by tugr@ Tag: 352397
  - 22
    - Cannot start iisadmin Hi, I'm going crazy with IIS on Win 2003 Server! - After one year without errors now i reinstalled Win 2003 Server and IIS doesn't work any more. When I type "IISRESET" on command line then it says, that the service couldn't started. I tried "net start iisadmin". I got the message "error 5": "access denied". I'm logged on as local admin. Any ideas??? Ingo Tag: Hacked by tugr@ Tag: 352394
  - 23
    - Gzip compression and ASP.NET Hi Does anyone have experience using gZip compression on the IIS server with a ASP.NET application. How much can a page be compressed. As i see it it must have a huge impact on the total size. Eg. if i take a 400 kb (260 rows in a datagrid with viewstate) and saveit as txt file an compress it with winzip i zipped to around 30 kb. Thats something! Is the compression rate in the same area on the IIS server? Is there any penalties expect a higher CPU usage from the IIS server? (No problem in our application) Pther problem that i should be aware of? Thank in regards Anders Jacobsen Tag: Hacked by tugr@ Tag: 352381
  - 24
    - IIS5 Visual Studio.net FrontPage I was wondering if FrontPage extensions are a required component for Visual Studio.Net if you are hosting on a remote IIS server. The Visual Studio.Net readme marks it as a requirement and when you do the install for the Server Components to the IIS server the install require FrontPage Extensions as a core component. I have read elsewhere that frontpage extensions are not required, but how di you install the Server Components (Like Remote Debugger) if the extensions are not installed? Thanks in advance Tag: Hacked by tugr@ Tag: 352375
  - 25
    - IIS 6.0 server side redirection I am trying to do a server side redirection in IIS 6. I go into the Internet Information Services program, and change the file properties to redirect to a URL in same app-pool. I redirect a particular asp page ( say http://localhost/forum/default.asp) to another page ( say http://localhost/forum/activate.asp). I see something unusual in the callback order. My application is a dual one that implements both filter and wild card extension. When server-side redirects, the application first gets called with the original request till SF_NOTIFY_SEND_RESPONSE notification . HttpExtensionProc is not called where we process the request and create application context data. Instead under normal condition, first HttpExtensionProc ( that process the request ) is called and then only response notification is called. PS : The asp application "forum" exist in the same application pool. Also the page is getting redirected, however, internally the application behaves differently. Can anyone please explain me why HttpExtensionProc does not get called? Thanks and Regards Shilpi Gupta Tag: Hacked by tugr@ Tag: 352370

Has anyone heard of this one?

What they do is to copy:

index.php .cfm .htm .html .asp
default.php .cfm .htm .html .asp

to the root folder of every web site.

I can't find much on it on the web. I thought I had figured it to be
an old servu ftp server hack so I upgraded about 3 weeks ago but today
upon reboot it happened again.

Yes a totally patch win2k server.

Thanks

Top

Re: Hacked by tugr@ by Frank

Frank
Tue Jan 04 16:28:08 CST 2005

Check your server for application that has known holes.

There are several applications out there that have known holes which allow
hacker to upload asp scripts which overwrites index file.

"John Cesta" <lists@lookwww.com> wrote in message
news:v3mlt0hrhlte26ud6ulduattmosrj37kek@4ax.com...
>
>
> Has anyone heard of this one?
>
> What they do is to copy:
>
> index.php .cfm .htm .html .asp
> default.php .cfm .htm .html .asp
>
> to the root folder of every web site.
>
> I can't find much on it on the web. I thought I had figured it to be
> an old servu ftp server hack so I upgraded about 3 weeks ago but today
> upon reboot it happened again.
>
> Yes a totally patch win2k server.
>
>
> Thanks
>
>

Top

Re: Hacked by tugr@ by John

John
Tue Jan 04 16:50:50 CST 2005

On Tue, 4 Jan 2005 14:28:08 -0800, "Frank Cheung" <nospam@nospam.org>
wrote:

>Check your server for application that has known holes.

Oh thanks...I didn't know that!? ;))

>There are several applications out there that have known holes which allow
>hacker to upload asp scripts which overwrites index file.

>
>
>"John Cesta" <lists@lookwww.com> wrote in message
>news:v3mlt0hrhlte26ud6ulduattmosrj37kek@4ax.com...
>>
>>
>> Has anyone heard of this one?
>>
>> What they do is to copy:
>>
>> index.php .cfm .htm .html .asp
>> default.php .cfm .htm .html .asp
>>
>> to the root folder of every web site.
>>
>> I can't find much on it on the web. I thought I had figured it to be
>> an old servu ftp server hack so I upgraded about 3 weeks ago but today
>> upon reboot it happened again.
>>
>> Yes a totally patch win2k server.
>>
>>
>> Thanks
>>
>>
>

Top

Re: Hacked by tugr@ by jeff

jeff
Tue Jan 04 17:09:31 CST 2005

On Tue, 04 Jan 2005 17:58:51 GMT, John Cesta <lists@lookwww.com>
wrote:

>Has anyone heard of this one?
>
>What they do is to copy:
>
>index.php .cfm .htm .html .asp
>default.php .cfm .htm .html .asp
>
>to the root folder of every web site.
>
>I can't find much on it on the web. I thought I had figured it to be
>an old servu ftp server hack so I upgraded about 3 weeks ago but today
>upon reboot it happened again.
>
>Yes a totally patch win2k server.

There are hundreds of ways to copy files to even a totally patched
server, the simplest of wich would be to log in as the administrator
and do so. Of course, this means that someone knows your
administrator password, which bypasses any security patch you can put
in place.

Without knowing how it happened your wisest course is to flatten the
box and reinstall from scratch. Check securityadmin.info for further
security hints and tactics.

Jeff

Top

Re: Hacked by tugr@ by Frank

Frank
Tue Jan 04 18:08:21 CST 2005

This was the one which affected us

http://www.security-corporation.com/advisories-026.html

"John Cesta" <lists@lookwww.com> wrote in message
news:n77mt0lo34firkjd67e364d0a96a5tbjqt@4ax.com...
> On Tue, 4 Jan 2005 14:28:08 -0800, "Frank Cheung" <nospam@nospam.org>
> wrote:
>
>>Check your server for application that has known holes.
>
> Oh thanks...I didn't know that!? ;))
>
>>There are several applications out there that have known holes which allow
>>hacker to upload asp scripts which overwrites index file.
>
>
>>
>>
>>"John Cesta" <lists@lookwww.com> wrote in message
>>news:v3mlt0hrhlte26ud6ulduattmosrj37kek@4ax.com...
>>>
>>>
>>> Has anyone heard of this one?
>>>
>>> What they do is to copy:
>>>
>>> index.php .cfm .htm .html .asp
>>> default.php .cfm .htm .html .asp
>>>
>>> to the root folder of every web site.
>>>
>>> I can't find much on it on the web. I thought I had figured it to be
>>> an old servu ftp server hack so I upgraded about 3 weeks ago but today
>>> upon reboot it happened again.
>>>
>>> Yes a totally patch win2k server.
>>>
>>>
>>> Thanks
>>>
>>>
>>
>

Top