General discussion

  • Creator
  • #2190008

    Do my permission is wrong with IIS 6


    by jimmy chan 1979 ·

    Hi all,

    Here are the screen capture of my root of D: permission
    Now Let me tell you what I do for integration the IIS and FTP after the default installed OS .

    1. I build a user called “abcd” and give him a password
    2. Later, I following the microsoft document to build up a isolate FTP
    3. I make a “virtualhost” directory under root of D:
    4. under “virtualhost” I build a LocalUser directory
    5. LAter I build a “abcd” under LocalUser
    6. Later build up INetPub under “abcd” (for security reason of the Access Database, I want to the user’s root FTP folder is in D:\virtualhost\LocalUser\abcd\, and the IIS will point to D:\virtualhost\LocalUser\abcd\INetPub\wwwroot , so other Internet can’t download the access mdb file, since they don’t know the root of the FTP directory is not same as the IIS one)
    7. Build “wwwroot” under “INetPub”
    8. I change the FTP’s default directory from “C:\inetpub\ftproot” to “D:\virtualhost”
    9. I add a new web site in IIS, and point it to “D:\virtualhost\LocalUser\abcd\INetPub\wwwroot”
    10. I change the FTP’s “Directory listing style” under “Home Directory” from “MS-DOS” to “UNIX”
    Later, I open FileZilla FTP client, and upload the file to the FTP, it work ok and can del, make new files … but I take care of the right side of my FTP client, it show me RWXRWXRWX onthe files ….
    But, I have make a php forum using to upload the attachment by the froum, and go to the FTP client to see the files, it is R-XR-XR-X (P.S. I have add a write permission to the ISUR_MACHINE_NAME for the forum, else it can’t write anything to the attachment directory), the permission is not same with the abcd account one …. why, do it will be a security hole of my web site?? Here are the screen capture

All Comments