Aron
|
| Posted: 06/23/2003, 8:28 AM |
|
Hi,
I try the file upload form object first time and I have a problem.
After creating and publishing the form I see it in a browser and it sais "Insufficient filesystem permissions to upload the file specified in FileUploadmini into temporary folder." in red. I've created a temp folder and checked the rights of it on the server and it is "drwxr-x---". I only upload to that server and I'm not an administrator of it but as I know these letter mean that you have rights to write into that folder.
What can be the problem then?
|
|
|
 |
Aaron J. Scott
|
| Posted: 06/23/2003, 11:54 AM |
|
Would i be correct in assuming that the breed of Web Host is IIS 5 on a Windows 2000 Host/Server?
If so Check the web folder permissions in the IIS msc Appelate, also check the inheritance of ACL permissions in the folder on the server its self. Make sure IUSR_yourhostname has read, write, and modify permissons for the upload folder. Prudence would mandate that you deny execute permissions for that folder just in case you browsee decides to upload an executable then turn around and coerce the server into running it. Do this from the server console or some other directly connected managment node in the ACL for the upload folder. I can delve into how the execute could be done in a private venu such as an email, would not want to give out exploit ideas to those who would try such things.
|
|
|
|
Frans
|
| Posted: 06/23/2003, 11:50 PM |
|
Looks like only the owner off that directory has write permissions.
drwxr means Directory, readable, writable and execute. I use an advanced FTP client which can set the folder permissions. Usually you can left click with your mouse on the directory and click on properties to change the folder permissions. 775 is a good one if you are a member of the group wich owns the folder.
|
|
|
|
|
