2025-04-27 07:49:33 -04:00

27 lines
1.3 KiB
HTML

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML//EN">
<HTML>
<HEAD>
<meta name="GENERATOR" content="Microsoft FrontPage 4.0">
<Title>Disabling Scripting</Title>
</HEAD>
<BODY bgcolor=#f0f0b0>
<H3>Disabling Scripting</H3>
<P>
IIS allows a user to set the script and execute permissions on a Virtual Directory separately
from its Write permissions. Usually, users who allow script and execute on a virtual
directory disallow writing to that virtual directory. When a virtual directory is BITS-Upload
enabled, then even though the “Write” permissions on the virtual directory has been disallowed,
the users can write to this directory via BITS from the client side. To protect the server,
BITS disables all Script and Execute permissions on a BITS-Upload enabled Virtual Directory.
To make sure that this virtual directory is secure, BITS Server extensions will check to make
sure that these permissions are disabled before responding to any client request for uploading
data. If these permissions are enabled at any time, BITS Server Extensions will deny all
upload requests thereafter, until the permissions are disabled again. Every time BITS Server
extension denies a request in such an environment, it will write a log entry in the IIS logs.
</P>
</BODY>
</HTML>