I have virtual folder in IIS6 which has asp file as default and several jpg files. How to prevent JPG files download from server? I want to let execute asp file only and do not let users download jpg files.
View 0 RepliesI am fairly new to managing an IIS 6 server and recently installed PHP 5. I am still learning about ISAPI and ISAPI filters. In the WSE within IIS Manager I have allowed PHP to be used. Is PHP running as an ISAPI application and if so why would no filter be showing up in the ISAPI filters property box of the website? Everything works fine, I am just trying to get a better grasp of this issue.
View 0 Replies View RelatedI have a web application built with PHP which uses the MVC design pattern.
The application forwards all requests through index.php.
I am using IIRF (similar to mod_rewrite - IIS6 has no native rewrite module) to rewrite all requests through the index.php file and this is successful.
My application has several "modules" which I wish to be accessible via different URLs. For example the following is how I wish to set up my URLs: ...
a few migration of domains from IIS 5 to IIS 6, these have SSL certs, wonder can the SSL certs of IIS 5 be used on IIS 6? Anyone tried that before?
View 2 Replies View RelatedI have enabled compression in IIS6 on win2k3 server and the dynamic compression is working lovely but the static compression is not functioning. I have double checked the metabase settings and permissions on the Temp Folder (IUSR write permissions) but nothing is ever written to the folder and my static files (htm,html) are not sent with compression! FWIW I can compress them by adding the filetype to the dynamic compression metabase string and they work but this is not efficient. I think I must have overlooked something...
Here are the metabase values:
<IIsCompressionSchemeLocation ="/LM/W3SVC/Filters/Compression/deflate"
HcCompressionDll="%windir%system32inetsrvgzip.dll"
HcCreateFlags="1"
HcDoDynamicCompression="TRUE"
HcDoOnDemandCompression="TRUE"
HcDoStaticCompression="TRUE"
HcDynamicCompressionLevel="9"
HcFileExtensions="htm
html
txt"
HcOnDemandCompLevel="9"
HcPriority="1"
HcScriptFileExtensions="asp
dll
php"
>
</IIsCompressionScheme>
<IIsCompressionSchemeLocation ="/LM/W3SVC/Filters/Compression/gzip"
HcCompressionDll="%windir%system32inetsrvgzip.dll"
HcCreateFlags="1"
HcDoDynamicCompression="TRUE"
HcDoOnDemandCompression="TRUE"
HcDoStaticCompression="TRUE"
HcDynamicCompressionLevel="9"
HcFileExtensions="htm
html
txt"
HcOnDemandCompLevel="9"
HcPriority="1"
HcScriptFileExtensions="asp
dll
php"
>
</IIsCompressionScheme>
<IIsCompressionSchemesLocation ="/LM/W3SVC/Filters/Compression/Parameters"
HcCacheControlHeader="max-age=86400"
HcCompressionBufferSize="8192"
HcCompressionDirectory="C:WINDOWSIIS Temporary Compressed Files"
HcDoDiskSpaceLimiting="FALSE"
HcDoDynamicCompression="TRUE"
HcDoOnDemandCompression="TRUE"
HcDoStaticCompression="TRUE"
HcExpiresHeader="Wed, 01 Jan 1997 12:00:00 GMT"
HcFilesDeletedPerDiskFree="256"
HcIoBufferSize="8192"
HcMaxDiskSpaceUsage="99614720"
HcMaxQueueLength="1000"
HcMinFileSizeForComp="256"
HcNoCompressionForHttp10="FALSE"
HcNoCompressionForProxies="TRUE"
HcNoCompressionForRange="FALSE"
HcSendCacheHeaders="TRUE"
>
</IIsCompressionSchemes>
A client of mine suffered repeated attacks on his web pages defaced with msg
New Priv8 Bug In iis6
I can't seem to be able to solve for him, have arranged hardening of his server, have done root kit scans etc all came out to nothing.
Is there any IIS 6 bug that is not patched that can cause this?
I've installed Imagemagick on our server and tested that it works using the little test that you do at the end of the installation. All is fine.
However, in order for my web site to seeuse it I assume I need to tell IIS 6 about it's presence? If so, how do I do it? If not, do I just need to allocate permissions to the Imagemagick folder (eg IUSR)?
we've been installing a web-app on a domain controller at work. Previously the app ran on WAMP but the new server has to run IIS, though PHP and MySQL is acceptable for now.
We've jumped through hoops to get it working as well as it is now, but we've hit a few snags which seem common, but none of the solutions work for us.
We were having problems where the MySQL extensions for PHP could not be loaded because of access rights. When we look at a phpinfo() output the MySQL information is completely missing. This happens with any user set in the application pool with the exception of Administrator. When we make that user the one that runs that application pool then the MySQL extensions load fine and the whole system works perfectly. Even if we change it to another admin user the system still won't work.
I am having trouble setting up webdav on IIS6. I wasted all day on this today.
So far I have set it up to work over the internet with anonymous access.
Now I want to turn on:
1) basic authentication
2) SSL
I try to turn on (1) but:
- when try to access over the internet, it prompts for my login but it doesn't accept the login and keeps reprompting me.
- when I try to access from the local server, it seems to accept the login but gives an error 'the folder you entered does not appear to be valid, please choose another'
I have created a new user who has permission to access both the directory on the server and the virtual directory in IIS. I have turned on the webdav extension. I have tried reinstalling IIS too.
i recently set up a new testing web server(iis6), but can't view any of my websites hosted on my mac (osx leopard). I can ping the server from the mac, and RDP with out any problems, just can't view any websites. i've tried using the ip of the server (192.168.1.15) in the browser the server name but still no luck. server firewal has been disabled
View 3 Replies View Relatedweb stats software for my server.
Need the basics stuff like hits, but path analysis would be awesome.
I thought maybe if it was an IIS extension, that would be good?
Anyways, i was wondering who the major players are out there, and which ones are popular. I am willing to get a paid one.
I'm told smart stats is good.
I am attempting to change the host headers on my site that take my domains and forward them out to another domain.
My problem is that if a person type in [url], it brings them to my site and every link of the site is then [url]instead of redirecting it to my intended [url]
My site is hosted on a friends server, which is in his office on a 24MB Business ADSL connection, and is running Server 2003 Enterprise.
I thought i'd try and set up custom error pages for my site last night, but for whatever reason, I can't get them working.
I did a test page with random text, and named it 404.htm.
I then did a file with the following in:
<Files .htaccess>
order allow,deny
deny from all
</Files>
ErrorDocument 404 /404.htm
I then renamed the file to .htaccess after uploading both of the files.
However, when I tried entering a non existant page url, the normal IIS 'page cannot be found' error came up.
In addition, the .htaccess file was still visible when I connected via ftp again.
Now I think of it, I can understand the file not ending up invisible, since files with a . in front are most commonly used on *nix OS's.
However, that wouldn't explain the error page not working.
Is there something I need to get the person who owns the server to do to get it working, or am I doing it completely the wrong way for a Windows machine?
should have done a search before posting really.....I was doing it the wrong way, and I will need to get him to do it, as it needs setting up in the IIS config.
When ever I edit php.ini the changes are not reflected in my PHP applications (I check using phpinfo). Even after restarting IIS (Right click on the computer in IIS > All Tasks > Restart IIS) the changes are not reflected.
The only way I found out how to update the changes is by restarting the whole server, but this is not pratical.
How can I get the edits in php.ini to reflect in my PHP applications without having to restart the whole server?
how to trace or know who is overloading IIS in windows 2003 server?
When i check in the task manager , i saw sometimes w3wp.exe (IIS Worker Process) using high CPU usage for long time. That cause the server to be sluggish and sometime not responding.
Any tips or software that can tell which websites that cause the overload?
I use an SSL certificate on IIS6 for Outlook web access.
I have to renew in the next few days.
Now I find that Godaddy have changed the minimum bit length from 1024 to 2048, but the Microsoft Wizard doesn't give me the chance to change the bit length when I try to generate the CSR file.
If I remove the certificate and generate a new certifcate CSR will I be OK? (I can stand a little downtime - it's a small organisation).
Do I have to get all the text the same as when I first requested the SSL certificate? Or just the URL bit?
Customer wants to move his website in-house along with his email. The hardware guy installed a windows 2003 64-bit exchange server. I logged in with logmein and created a directory c:Inetputwwwroot hewebsite. Copied iisstart.html to the new dir. Put the company name in the iisstart file. Opened IIS6. Went to properties of the default website and pointed to the new directory on the home dir page. Added iisstart.html the Documents page and moved it to the top. Closed everything. Opened Internet Explorer 7 and put in http://localhost. All worked well. Brought up the new start page. Opened IE7 on my pc and put there ip address in and it also brought up the new webpage (tested the port 80 in the router). Said we were ready to go.
The hardware guy sent me an email stating that he was having problems with the 64-bit version and took the server back to the 32-bit version of windows exchange server. I logged back in with logmein and followed the same exact steps as above but it will not show the new webpage. Am getting a page not found error.
I have done the above on several 2003 servers and several xp pro machines. Always works.
Have done one 2003 exchange server. Went to a couple of those servers and made sure the default website settings were exactly the same as the ones that work. Still no help.
Downloaded an iis6 troubleshooting program from microsoft but cannot locate the error. I have been studying the II6 documentation and 2003 exchange server documentation. Went thru all the tutorials in google on iis6 and exchange I can find no help.
We are migrating an existing multi-site Windows2003/IIS6 web hosting system with
CFusion8
MS Access backend databases
SQL2000 backend databases
http and https site access
to
Windows2012 R2/IIS8.5 with
CFusion10
MS Access backend databases (not updated)
SQL2014 databases
http and https site access
On the new system we are looking to add Plesk12 to give users easier management of their own websites.I am about to install the trail version of Plesk12 WebHOST.I have the following questions:
1. Can we use the plesk migration tool to move the websites from the old IIS6 to the new IIS8.5 server?
2. If not, am I right to think we would migrate from IIS6 to IIS8.5 manually and then import these websites into Plesk12 from the new server?
3. Can I migrate the existing websites piecemeal over onto the new server and into the Plesk control panel at the same time as creating brand new websites under the control panel?
4. Once Plesk is installed on the new IIS server is there a KB article on how to add all these existing websites to Plesk - I could not find one.
5. Is the local windows administrator account used for the install used to run any services?
I'm trying to do is wget images, however, i'm not sure how to do it 100% right...
what ive got is a index.html page that has images(thmubs) that link to the full size images. how do i grab the full size images?
Example of links on the page:
<a href="images/*random numbers*.jpg" target="_blank"><img border=0 width=112 height=150 src="images/tn_*random numbers*.jpg" style="position:relative;left:3px;top:3px" /></a>
i tried
wget -A.jpg -r -l1 -np URLHERE
Has anyone here gotten any of the Xen images from jailtime.org to work on CentOS? I've figured out what the heck I'm doing since my last question [url], but they still won't boot. And the more I Google it, the more people I find asking the same questions.
It looks like they're depending on a bunch of non-standard images in their initrd, and, unless we have some of these unknown modules, the darned thing won't boot. Mine ends up failing like this:
Code:
NET: Registered protocol family 1
NET: Registered protocol family 17
Using IPI No-Shortcut mode
XENBUS: Device with no driver: device/vbd/2049
XENBUS: Device with no driver: device/vbd/2050
XENBUS: Device with no driver: device/vif/0
md: Autodetecting RAID arrays.
md: autorun ...
md: ... autorun DONE.
VFS: Cannot open root device "sda1" or unknown-block(0,0)
Please append a correct "root=" boot option
Kernel panic - not syncing: VFS: Unable to mount root fs on unknown-block(0,0)
The xen.conf for this particular VM:
Code:
# This points ta real Dom0 kernel!
kernel = "/boot/vmlinuz-2.6.18-53.1.13.el5xen"
memory = "256"
name = "Ubuntu-Matt"
vif = [ 'mac=00:01:02:03:04:07, bridge=xenbr0, vifname=vif1.0' ]
# Set the disk...
disk = ['file:/home/matt/vms/ubuntu-7.04/ubuntu.7-04.img,sda1,w', 'file://home/matt/vms/ubuntu-7.04/ubuntu.swap,sda2,w']
root = "/dev/sda1 ro"
This is driving me bonkers... Has anyone gotten these to work? Would I be better off just installing from an ISO?
I have uploaded my site through FTP. Everything seems to be showing except the /images files.
Images in .gif and .jpg ain't showing up. The error I get is
"The image "image URL" cannot be displaying, because it contains error"
It's weird because the image is uploaded on the ftp in images folder but for some weird reason it's not showing up.
how to have full size images in my DH (dreamhost) gallery2?
View 2 Replies View RelatedI plan to build huge image gallery, using lighttpd to server these images. It would be easiest for me to have all these files (more than 1 000 000) in one directory? Is it ok?
I have no idea, if this can cause any problems. Should I part my files into several directories, does it make serving better/faster?
Dose more images mean more RAM usage?
Do images take a heavy load on server RAM?
How to hotlink images in forum?
View 2 Replies View RelatedThe images I am trying to block are on page generated by a simple PHP script on my server. The offender has replicated what I am doing with ASP on their server. They are hotlinking to my images for the resulting page. They left my website's name on them, so they must think that giving credit is enough.
I'm going to be contacting them to stop but I also want to see if there is a way for me to prevent it from happening in the first place.
I tried mod_rewrite...
Code:
RewriteEngine on
RewriteCond %{HTTP_REFERER} !^$
RewriteCond %{HTTP_REFERER} !^[url].*$ [NC]
RewriteRule .(gif|jpg)$ - [F]
I know mod_rewrite works on my server because I've been using it for some other things.
However, whenever I enable the above code (add it to the directives and restart apache - have also tried just putting it in a .htaccess file in the appropriate directory), I end up with images still being allowed on my domain and the other domain I'm trying to stop from using my images. Do you think it could have to do with an absent referrer? I read that the code doesn't work if the referrer is blank. What else would cause this not to work? Obviously the domain would have to be correct, but it doesn't block from my domain OR the offending domain.
I tried another method:
Code:
<FilesMatch ".(gif¦jpg¦png)$">
SetEnvIfNoCase Referer ^$ allow_image
SetEnvIfNoCase Referer ^[url] allow_image
Order Deny,Allow
Deny from all
Allow from env=allow_image
</FilesMatch>
This one blocked images to the offending domain, but it also blocked mine!
I am creating a web application, nothing spectacular just something to display content.
After completing a long night of coding, I uploaded my files to my server and checked to make sure everything was functioning correctly. Everything seemed fine so I went to bed.
The next morning, to my surprise, all my images had dissapeared! Well not all of them, just the ones being displayed through the PHP script. (coincidentally, these images where all in the same directory...)
Of course the first thought that went through my mind was "scripting error". Which surprised me, since everything worked perfectly the night before. I checked and double checked everything, and I couldn't find anything wrong. I checked the permissions on the directory holding the images and they appeared correct (755). So, to locate the problem I decided to strip out all the variables and create a test page that had only the SQL query, and a print to output the <img> code. Still nothing! So I decided to just go the HTML route and create a test file that held only the <img> code, no PHP involved... nothing.
The images are on the server. I double checked... if you right click > view image, it shows up. Then if you go back to the "test" page and refresh the image is there... however, it does not appear when you first load the page, or it appears and then immediately dissapears.
I contacted my host about the issue, and their first response said:
Quote:
Dear customer,
The images are there if you login through plesk control panel and go to
File Manager under your domain you can find the pictures and see
them.But some of them are not opening under your website.
Best Regards
Honestly... are you kidding me? Reiterating my question doesn't constitute as an answer. And they call themselves "engineers"...
Seeing as it appears to only be affecting one directory (and possibly only JPG images...? Have a look at the test pages above), I believe it might be a permissions issue.
I've got an application (java web ) tha dynamically creats images ( with dynamic url - ...tab&vi=nia&h=24&ds=bottom&fn...) - like thumbnails,icons ect.
The think I'm trying to deal with is to force caching theese images by a browser.
When the application starts the server gets images and shows code 200 ( and this images apppers in web browser cache), but after reloding or simply viewing the images from the cache url the server shows again code 200. I'd like to have code 304 - not modified - like when browser gets an image from cache.
The dynamic url for image is being created only once - when the appication starts, and after that it stays unchanged, but I still can't force use the cached images - like when it is a static url - .../image.jpg.
I need a medium of some kind to store my backup drive images of a windows 2003 standard x64 server. I will be taking DriveImage XML images every Sunday. The medium must have a minimum capacity of 250gb.
I am wondering what is the best/most cost efficient option? My budet is around $500.
I have heard tape and usb external drives.
Can you provide specific models, costs, pros/cons of each technology and product?
I'm using suphp to secure a shared web hosting server and am confused about one issue I'm having. It is my understanding that using suphp, you should be able to chmod 755 all directories and chmod 600 all files since apache runs the .php files as the user.
However, when I chmod 600 all files, the formatting of the sites gets messed up. It loses all css and if you try to view image files in the browser you get a permission denied error. Why is that?
As a temporary solution, I can chmod 644 all files and then 600 only sensitive files like config files (wp-config.php for WordPress for example), but I'd rather just chmod 600 everything.
Can anyone explain why 600 doesn't work?
With 644 permissions, any user could upload a script like:
Code:
<?php
$filename = realpath("/home/user/public_html/wp-config.php");
$handle = fopen($filename, "r");
$contents = fread($handle, filesize($filename));
fclose($handle);
echo '<textarea name="textareaName" rows="46" cols="103">'.$contents.'</textarea>';
?>
and view another users's file if it is 644.
We have a major chunk of our traffic coming in from Asia and our servers are in the US. The latency is an issue which we have sorted out by ensuring we use Amazon's cloudfront CDN atleast for the static images.
Now while this is working rather well, we are now wanting to experiment and see if we could put up an additional image server in our country to serve IPs from that specific range.
In case the local image server goes down, the amazon cloudfront setup should be used. What are the best options for achieving this with the least amount of latency for the users?