C
Chris Hughes
I have implemented a HTTP handler (IHttpHandler) for HTTP PUTs, and
have some concerns as to the security of the solution.
My initial tests suggest that write and execute permissions must both
be given to the virtual directory owning the HTTP handler. Add to this
that there are potentially many thousands of computers uploading to
this directory, and this poses a very large security hole. But without
both write and execute I haven't been able to configure a working
system.
Can someone please advise whether I need both write and execute
permissions, and if not what I am doing wrong.
Many thanks,
Chris Hughes
have some concerns as to the security of the solution.
My initial tests suggest that write and execute permissions must both
be given to the virtual directory owning the HTTP handler. Add to this
that there are potentially many thousands of computers uploading to
this directory, and this poses a very large security hole. But without
both write and execute I haven't been able to configure a working
system.
Can someone please advise whether I need both write and execute
permissions, and if not what I am doing wrong.
Many thanks,
Chris Hughes