Security

Ask something
Discussion Locked

Subweb ?

0 helpful
1 reply

by techsuggestions 1 view

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Hi,
I have developed a web site under which photographers can open account. Once the account is opened then on the backend side some Admin make a directory in www.domain.com/ftproot/PhotographerId
This photographer Id is the number generated by the system. Now Photographer can upload his photographs in that directory using WS_FTP. We have developed the system thinking that we will make these folders as restricted for every photographer. But problem is that we can make the folder restricted but Photographer can go to other folders and view other stuff even programs, which I don?t want. So my ISP people suggested sub web. I am not very clear about how my application will interact with those without changing programs. Also if you can tell me some way to encrypt the asp code that will be great help.

We are using ASP, IIS 5.0 and windows 2000 server. I am using shared server.

Your help will be appreciated.

Thanks

Rajesh

1 reply

by insatiable

Can't the Admin that created the /ftproot directory for you, restrict the read access for the other directories on the /ftproot level?
Do they access it with ftp or http? (ftp://www.domain.com/ftproot/PhotographerID or http://www.domain.com/ftproot/PhotographerID)
It sounds like you're using http, but if you just want them to ftp to their own folder, you should restrict it to the ftp.
Good Luck!!

This discussion is closed to new replies.