David
Fri May 09 13:44:02 CDT 2008
On May 9, 1:56=A0am, Patrick <Patr...@discussions.microsoft.com> wrote:
> Dear All,
>
> I am sure I am missing something very obvious, but can not figure out what=
> it is.
>
> I have an application running on IIS6.0 under Default website. I want to
> move this into a different website (different port, say 8085). So I create=
d
> the new website listening on port 8085.
>
> There is a virual directory in the original site (which belongs to the
> application) which contains (Pearl) =A0Scripts. So I l duplicated this und=
er
> the new website and gave exactly the same permissions (Read only for local=
> path/directory and Script & Excutables unfer Executable permissions).
> ["Script Source Access" box is not checked].When I access the
> website(
http://myserver:8085), the script source get displayed on the brow=
ser
> rather than executing it.
>
> What am I missing?
>
> Thanks heaps
>
> Patrick.
You have at least two configuration problems.
1. The Perl script's extension is not defined to be downloadable by
default. Thus, if you saw the script code, it means you have a
misconfigured MIME Type that allows download for either the Perl
script's extension or more likely, all extensions (*). This
configuration is clearly insecure and not the default, so please check
your misconfiguration.
2. The Perl script's extension is not defined to be a script by
default, either. You need to configure the "Application Mappings" for
this new virtual directory and ensure that the script's extension has
a similar mapping as the original.
http://blogs.msdn.com/david.wang/archive/2005/07/11/Allow_file_downloads_on_=
IIS_6.aspx
In short, IIS only treats entries in Application Mapping as scripts,
and that setting is unique per-URL. Otherwise, you would not be able
to have a website which runs a CGI EXE to serve up pages of EXE file
downloads.
//David
http://w3-4u.blogspot.com
http://blogs.msdn.com/David.Wang
//