it is most difficult to fix. Because it is out of your
FPSE and the IIS not set correctly. FPSE wants to control
anonymous access and also allow Authoring. 9this is done
created to upload in the IIS manager.
clear text method. This will protect the page and once you
cooperate. Where is the URL of this page now Dave?
Authentication method. Just that one page also I have IIS
>-----Original Message-----
>Thanks Joe,
>
>I am already using aspUpload, and that is where you need
>the write permissions on the folder.
>
>I have already tried the FP solution of right clicking
the
>folder, but get a "Server Error: Not permitted..."
>
>Grrrrrrr....
>
>>-----Original Message-----
>>Here are two options
>>
>>Option 1)
>>First FPSE is a pain in A**
>>next the solution is this
>>
>>Create a new page on your website and use the Frontpage
>>form from the Insert menu in the toolbar.
>>
>>once you insert this form it will ask you where do you
>>want the files to uploaded to. Select the folder you
want.
>>I use "upload" of course you will have to create the
>>folder first. Now right click on this folder >>>
>>properties >> and select allow anonymous upload to this
>>directory.
>>
>>Now go to your browser and type in the URL of your
upload
>>page you can now upload anything you want upto 2MB Maybe
>4
>>I don't remeber?
>>
>>Well anyhow...
>>
>>This page will be exposed to anyone and FP will not
>>restrict uploads of file extensions. But you can protect
>>the page I will show you how later. Just tell me if it
>>works from here.
>>
>>Option 2)
>>
>>You can use a commercial asp upload program such as
>>aspsmartupload or aspupload.
>>
>>Go here and see if this is what you are looking for
>>
>>
www.animocracy.com >>
>>also the FP upload
>>is located here
>>
>>
www.tech1solutions.com >>enter the site and then see on the left the menu that
>says
>>submit files
>>
>>Username >>> submit
>>Password >>> file
>>
>>You will see a confirmation form after
>>
>>w00t!
>>Joe
>>
>>
>>
>>
>>>-----Original Message-----
>>>Hi I am having a problem with my host at the moment and
>>>wondered if anyone could help.
>>>
>>>I am trying to use a script that uploads an image to a
>>>directory. I need to allow the directory to allow write
>>>permissions. I have done this fine with my last host
but
>>>having major probs with this one. I attach an email
with
>>>details of the discussion, and if someone can tell me
if
>>>it is rubbish or not it would be greatly appreciated!
>>>
>>>
>>>START OF MESSAGE
>>>
>>>Sys Admin:
>>>We could give the anonymous user higher level of access
>>by
>>>default - this would however pose a security risk to
his
>>>site. There are a lot of exploits out there which will
>>>sweep for anonymous upload access - I doubt it would be
>>to
>>>longer before the site got defaced.
>>>
>>>Sales:
>>>How has this worked for him before, what is it that
>other
>>>hosts are doing that we aren't?
>>>
>>>Sys Admin:
>>>The other hosts don't have a security policy as tight
as
>>>ours.
>>>
>>>You can just make the whole server anonymous, and
nobody
>>>would have to remember their password but would it make
>>>it "better"???
>>>
>>>Sales:
>>>Ok right, so I understand it as well, the whole point
we
>>>do it this way is because of security concerns?
>>>
>>>Sys Admin:
>>>Basically our Windows 2003 system is extremely tight
>Each
>>>site has individual IUSR's, everything anonymous is
>>>switched (uploading via HTTP & FTP). IUSR's have
limited
>>>access to the servers, everything but supported file
>>>extensions and technologies are switched off.
>>>
>>>Sales:
>>>But the customer has other sites with us with the
config
>>>but he hasn't come across this problem.
>>>
>>>Sys Admin:
>>>We do however (because of the security of the
individual
>>>IUSR's), allow read/write/modify permission across the
>>>customers "\www\" directory.
>>>However FrontPage switches the permissions to "read
>>>only" .... This is the actual NTFS disk permissions..
>>What
>>>the customer requires us to do is turn on what would
>>allow
>>>anonymous uploading as well as uploading from scripts -
>>>which can be a problem...
>>>
>>>Like I mentioned before said, we can change the disk
>>>permissions which should allow your customer to upload -
>>>but they will be reset back to "Read" if we run
>a "server
>>>health check", which is usually what is done when
>someone
>>>reports a FP problem (and FP always need maintenance at
>>>some point or another)..
>>>
>>>.
>>>
>>.
>>
>.