Set WEB server IIS write permission Protection hacking

Often friends who have just used the cms website will mention that the background content cannot be updated. If the basic settings cannot be saved, the database cannot be written. If these problems occur, you can refer to the following methods.

First check if the hard disk where the website is located is in NTFS format. If it is very likely that the Everyone permission problem, that is, Everyone does not have permission to operate the folder, the operation method:

First: Click the "Tools" in the menu bar of the folder "Tools" -> folder options --> View, cancel [Use simple file sharing (recommended) √, then confirm.

Second: Right click on the folder where the website is located, select “Properties --> Security, give Everyone or Users (depending on the system) full control, that is, allow Put all the above √ and then confirm.

Third: Then restart IIS.

If you are a Win7 system or the system disk is in NTFS format, you need to set the C:\\WINDOWS\\temp folder to the same permissions!

========== ============ The above settings are for the local computer, the following settings are for the 2003 server ====================== Br>

Most beginners use a local XP system as a server, and of course we may use the 2003 server. So the following is for the 2003 server setup.

1. First get the website all or FTP to the server, if it is in the wwwroot folder.

2. Right click on the wwwroot folder and select “Attributes”.--&&quoquo;Security" If you do not have an Internet guest account, click “Add”--“Advanced --&&quoquo ; Find now & rdquo; --- then select “ IUSR_username-xxxx” OK.

3. Select the Internet guest account to assign the following permissions: read and run, list the folder directory, and read. As shown in the figure

If there is no permission to browse the website, a login window will appear, as shown below:

4. For some folders, you need to select “write ” permissions, such as Upload directories, database directories, these permissions need to be set individually. The method is the same as above, just choose one more "write” only. If the upload directory also supports online deletion of files, then you need to click “Advanced> to enter advanced security settings, add corresponding delete permissions, or even full control.

Experience:

1. If it is a pure static page website, please do not add the write and delete functions, then your space is not poisonous.

2, if you have write permission, no modification and delete function, then your website is also very safe, even if there are intrusions, all written files can not be changed (left footprint) and your website itself The files are also quite safe. The only thing that can be written is a lot of junk files.

3, if there is modify permission, then it is the same as having the delete permission. Because a file can't be deleted, I can clear the content and delete it. So assigning these permissions requires caution. Original from: http://www.sogoupc.com/server/201405/9244.html