|
Downloading template files from web server (Development | Web | Personal | Website)
Be careful when hosting your web site based on DasBlog from a Windows XP machine. While IIS 6 in Windows 2003 prevents the download of files with unknown extensions by default, the IIS 5.1 in Windows XP allows downloading such files. In the case of DasBlog all *.blogtemplate files are at risk. There are a few sites out there where these files can be downloaded. Although this probably isn’t a big security risk it might be something you want to prevent. Probably the easiest way to do that is by modifying the web.config file. You should add the following line at the end of the <httpHandlers> section:
<add verb="*" path="*.snippet" type="System.Web.HttpForbiddenHandler" />
6/10/2006 10:56:44 PM (Central Europe Standard Time, UTC+01:00) 
|