473,324 Members | 1,678 Online
Bytes | Software Development & Data Engineering Community
Post Job

Home Posts Topics Members FAQ

Join Bytes to post your question to a community of 473,324 software developers and data experts.

Sun ASP

Hello all,

I have gone insane trying to get an answer from sun about their products
but their forums lack regular activity. I'm hoping you kind folks might
be able to help me. Here is my set-up

windows 2000
Apache 2.0.48 (running under a local account)
sun 1 ASP (Chilisoft) 4.0.0

Now I have everything working properly but the problem is that a script
in a virtual host is able to use the FSO object to write outside of it's
document root. Anyone have any idea on how I would go about restricting
this? Unfortunately there is no admin interface on windows for
Chilisoft and even the casp.cnfg file does not exists. I did cruise
through the registry and tried to alter some values (EnableParentPaths)
there but to no effect.

Any insight would be greatly appreciated.

*** Sent via Developersdex http://www.developersdex.com ***
Don't just participate in USENET...get rewarded for it!
Jul 19 '05 #1
6 1693
On Fri, 19 Mar 2004 12:18:21 -0800, Paul Fournier <in**@kog.ca> wrote:
Hello all,

I have gone insane trying to get an answer from sun about their products
but their forums lack regular activity. I'm hoping you kind folks might
be able to help me. Here is my set-up

windows 2000
Apache 2.0.48 (running under a local account)
sun 1 ASP (Chilisoft) 4.0.0

Now I have everything working properly but the problem is that a script
in a virtual host is able to use the FSO object to write outside of it's
document root. Anyone have any idea on how I would go about restricting
this? Unfortunately there is no admin interface on windows for
Chilisoft and even the casp.cnfg file does not exists. I did cruise
through the registry and tried to alter some values (EnableParentPaths)
there but to no effect.

Any insight would be greatly appreciated.


You could likely fix this by switching to IIS. :)

Jeff
Jul 19 '05 #2
I'm seriously considering it and will start making some tests next week.
However, I would like to see if I can just get this issue fixed before
investing some money into a new system and OS.

Would you recommend Windows 2003 web server?

--
::Paul Fournier::
::Programmer/Analyst::
::Center for the Digital Arts::
::1455, boul. de Maisonneuve O., VA 03-1::
::Montreal, Quebec. H3G 1M8::
::Tel.848-2424 ext 4322, Cell.576-6451, Fax.848-4599::
"Jeff Cochran" <jc*************@naplesgov.com> wrote in message
news:40****************@msnews.microsoft.com...
On Fri, 19 Mar 2004 12:18:21 -0800, Paul Fournier <in**@kog.ca> wrote:
Hello all,

I have gone insane trying to get an answer from sun about their products
but their forums lack regular activity. I'm hoping you kind folks might
be able to help me. Here is my set-up

windows 2000
Apache 2.0.48 (running under a local account)
sun 1 ASP (Chilisoft) 4.0.0

Now I have everything working properly but the problem is that a script
in a virtual host is able to use the FSO object to write outside of it's
document root. Anyone have any idea on how I would go about restricting
this? Unfortunately there is no admin interface on windows for
Chilisoft and even the casp.cnfg file does not exists. I did cruise
through the registry and tried to alter some values (EnableParentPaths)
there but to no effect.

Any insight would be greatly appreciated.


You could likely fix this by switching to IIS. :)

Jeff

Jul 19 '05 #3
G
> Would you recommend Windows 2003 web server?

Hi,

I used COBALT RaQ4's, & 550's for almost five years, and eventually made the
jumop to Windows Server 2003. Absolutely amazing!!! Took a week or two to
get used to it, but there is no going back. I got my server from oneandone,
www.oneandone.com - costs me around £600 per year, and generates me around
£1500 per day - my site gets around 1000 heavy users a day, and I have 0
issues.

G.
Jul 19 '05 #4
> However, I would like to see if I can just get this issue fixed before
investing some money into a new system and OS.
You already have Windows 2000 so you have IIS 5 already.

Have you tried restricting NTFS security so that the virtual hosts can only
access their own files? You will need to have a different windows user for
each virtual host (I have no idea how you would do this with Apache but it
would be an Appache setting, not a Sun ASP setting).

--
Mark Schupp
Head of Development
Integrity eLearning
www.ielearning.com
"Paul Fournier" <fo**@alcor.concordia.ca> wrote in message
news:u1**************@TK2MSFTNGP09.phx.gbl... I'm seriously considering it and will start making some tests next week.
However, I would like to see if I can just get this issue fixed before
investing some money into a new system and OS.

Would you recommend Windows 2003 web server?

--
::Paul Fournier::
::Programmer/Analyst::
::Center for the Digital Arts::
::1455, boul. de Maisonneuve O., VA 03-1::
::Montreal, Quebec. H3G 1M8::
::Tel.848-2424 ext 4322, Cell.576-6451, Fax.848-4599::
"Jeff Cochran" <jc*************@naplesgov.com> wrote in message
news:40****************@msnews.microsoft.com...
On Fri, 19 Mar 2004 12:18:21 -0800, Paul Fournier <in**@kog.ca> wrote:
Hello all,

I have gone insane trying to get an answer from sun about their productsbut their forums lack regular activity. I'm hoping you kind folks might
be able to help me. Here is my set-up

windows 2000
Apache 2.0.48 (running under a local account)
sun 1 ASP (Chilisoft) 4.0.0

Now I have everything working properly but the problem is that a script
in a virtual host is able to use the FSO object to write outside of it'sdocument root. Anyone have any idea on how I would go about restrictingthis? Unfortunately there is no admin interface on windows for
Chilisoft and even the casp.cnfg file does not exists. I did cruise
through the registry and tried to alter some values (EnableParentPaths)
there but to no effect.

Any insight would be greatly appreciated.


You could likely fix this by switching to IIS. :)

Jeff


Jul 19 '05 #5
IIS comes with windows 200o does it not?

"Paul Fournier" <fo**@alcor.concordia.ca> wrote in message
news:u1**************@TK2MSFTNGP09.phx.gbl...
I'm seriously considering it and will start making some tests next week.
However, I would like to see if I can just get this issue fixed before
investing some money into a new system and OS.

Would you recommend Windows 2003 web server?

--
::Paul Fournier::
::Programmer/Analyst::
::Center for the Digital Arts::
::1455, boul. de Maisonneuve O., VA 03-1::
::Montreal, Quebec. H3G 1M8::
::Tel.848-2424 ext 4322, Cell.576-6451, Fax.848-4599::
"Jeff Cochran" <jc*************@naplesgov.com> wrote in message
news:40****************@msnews.microsoft.com...
On Fri, 19 Mar 2004 12:18:21 -0800, Paul Fournier <in**@kog.ca> wrote:
Hello all,

I have gone insane trying to get an answer from sun about their productsbut their forums lack regular activity. I'm hoping you kind folks might
be able to help me. Here is my set-up

windows 2000
Apache 2.0.48 (running under a local account)
sun 1 ASP (Chilisoft) 4.0.0

Now I have everything working properly but the problem is that a script
in a virtual host is able to use the FSO object to write outside of it'sdocument root. Anyone have any idea on how I would go about restrictingthis? Unfortunately there is no admin interface on windows for
Chilisoft and even the casp.cnfg file does not exists. I did cruise
through the registry and tried to alter some values (EnableParentPaths)
there but to no effect.

Any insight would be greatly appreciated.


You could likely fix this by switching to IIS. :)

Jeff


Jul 19 '05 #6
Thanks for the input Mark, [ + 20 rp3 ], and G,

I am aware that IIS 5 is on win 2k but I was thinking that I should take
the opportunity to upgrade a bit. I also like to experiment on the exact
software I plan to roll out on. It avoids those "but it worked fine on the
other IIS server" type of surprises.

As for the apache suggestion I'm afraid that Apache only runs on a
single process/account. So whatever rights I give to one I have to give to
all. Not really workable.
Paul Fournier wrote:
I'm seriously considering it and will start making some tests next
week. However, I would like to see if I can just get this issue fixed
before investing some money into a new system and OS.

Would you recommend Windows 2003 web server?
Paul Fournier::
Programmer/Analyst::
Center for the Digital Arts::
1455, boul. de Maisonneuve O., VA 03-1::
Montreal, Quebec. H3G 1M8::
Tel.848-2424 ext 4322, Cell.576-6451, Fax.848-4599::

"Jeff Cochran" <jc*************@naplesgov.com> wrote in message
news:40****************@msnews.microsoft.com...
On Fri, 19 Mar 2004 12:18:21 -0800, Paul Fournier <in**@kog.ca>
wrote:
Hello all,

I have gone insane trying to get an answer from sun about their
products but their forums lack regular activity. I'm hoping you
kind folks might be able to help me. Here is my set-up

windows 2000
Apache 2.0.48 (running under a local account)
sun 1 ASP (Chilisoft) 4.0.0

Now I have everything working properly but the problem is that a
script in a virtual host is able to use the FSO object to write
outside of it's document root. Anyone have any idea on how I would
go about restricting this? Unfortunately there is no admin
interface on windows for Chilisoft and even the casp.cnfg file does
not exists. I did cruise through the registry and tried to alter
some values (EnableParentPaths) there but to no effect.

Any insight would be greatly appreciated.


You could likely fix this by switching to IIS. :)

Jeff

Jul 19 '05 #7

This thread has been closed and replies have been disabled. Please start a new discussion.

Similar topics

3
by: William C. White | last post by:
Does anyone know of a way to use PHP /w Authorize.net AIM without using cURL? Our website is hosted on a shared drive and the webhost company doesn't installed additional software (such as cURL)...
2
by: Albert Ahtenberg | last post by:
Hello, I don't know if it is only me but I was sure that header("Location:url") redirects the browser instantly to URL, or at least stops the execution of the code. But appearantely it continues...
3
by: James | last post by:
Hi, I have a form with 2 fields. 'A' 'B' The user completes one of the fields and the form is submitted. On the results page I want to run a query, but this will change subject to which...
0
by: Ollivier Robert | last post by:
Hello, I'm trying to link PHP with Oracle 9.2.0/OCI8 with gcc 3.2.3 on a Solaris9 system. The link succeeds but everytime I try to run php, I get a SEGV from inside the libcnltsh.so library. ...
1
by: Richard Galli | last post by:
I want viewers to compare state laws on a single subject. Imagine a three-column table with a drop-down box on the top. A viewer selects a state from the list, and that state's text fills the...
4
by: Albert Ahtenberg | last post by:
Hello, I have two questions. 1. When the user presses the back button and returns to a form he filled the form is reseted. How do I leave there the values he inserted? 2. When the...
1
by: inderjit S Gabrie | last post by:
Hi all Here is the scenerio ...is it possibly to do this... i am getting valid course dates output on to a web which i have designed ....all is okay so far , look at the following web url ...
2
by: Jack | last post by:
Hi All, What is the PHP equivilent of Oracle bind variables in a SQL statement, e.g. select x from y where z=:parameter Which in asp/jsp would be followed by some statements to bind a value...
3
by: Sandwick | last post by:
I am trying to change the size of a drawing so they are all 3x3. the script below is what i was trying to use to cut it in half ... I get errors. I can display the normal picture but not the...
0
isladogs
by: isladogs | last post by:
The next Access Europe meeting will be on Wednesday 6 Mar 2024 starting at 18:00 UK time (6PM UTC) and finishing at about 19:15 (7.15PM). In this month's session, we are pleased to welcome back...
0
by: Vimpel783 | last post by:
Hello! Guys, I found this code on the Internet, but I need to modify it a little. It works well, the problem is this: Data is sent from only one cell, in this case B5, but it is necessary that data...
0
by: ArrayDB | last post by:
The error message I've encountered is; ERROR:root:Error generating model response: exception: access violation writing 0x0000000000005140, which seems to be indicative of an access violation...
1
by: PapaRatzi | last post by:
Hello, I am teaching myself MS Access forms design and Visual Basic. I've created a table to capture a list of Top 30 singles and forms to capture new entries. The final step is a form (unbound)...
1
by: CloudSolutions | last post by:
Introduction: For many beginners and individual users, requiring a credit card and email registration may pose a barrier when starting to use cloud servers. However, some cloud server providers now...
1
by: Defcon1945 | last post by:
I'm trying to learn Python using Pycharm but import shutil doesn't work
1
by: Shællîpôpï 09 | last post by:
If u are using a keypad phone, how do u turn on JavaScript, to access features like WhatsApp, Facebook, Instagram....
0
by: Faith0G | last post by:
I am starting a new it consulting business and it's been a while since I setup a new website. Is wordpress still the best web based software for hosting a 5 page website? The webpages will be...
0
isladogs
by: isladogs | last post by:
The next Access Europe User Group meeting will be on Wednesday 3 Apr 2024 starting at 18:00 UK time (6PM UTC+1) and finishing by 19:30 (7.30PM). In this session, we are pleased to welcome former...

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.