ASP.NET 2: My.Computer.FileSystem.WriteAllText can write text file to any folder ?

  • Thread starter Thread starter Tee
  • Start date Start date
T

Tee

as topic, is it this My.Computer.FileSystem.WriteAllText can create a text
file in any folder you want with and without permission ?

I create my ASP.NET 2 website with vs.net 2005 beta 1, and I host the page
in IIS locally for testing, but I found that I can create text file in any
folder ...

is it this is by default or I did something wrong with my permission setting
in my PC ?

Thanks,
Tee
 
as topic, is it this My.Computer.FileSystem.WriteAllText can create a text
file in any folder you want with and without permission ?

I create my ASP.NET 2 website with vs.net 2005 beta 1, and I host the page
in IIS locally for testing, but I found that I can create text file in any
folder ...

is it this is by default or I did something wrong with my permission setting
in my PC ?

Thanks,
Tee
Click to expand...

its not uncommon to see the "everyone" security group have full
control on a windows box.

-Adam
 
I knew this well ... my web app can even create a text file in C:\Program
Files\blah blah ...

and I have checked, "everyone" is not even in the list of user, so don't
even think about "everyone" has the full control.

There are few users there, but I dont think those having write permission
have any relation with IIS.


Thanks,
Tee
 
BTW: it shouldn't belong to admins by default (with my beta installation it
doesn't). Check what are the users who do have access to the path and see if
ASPNTE belongs to them.
 
I just simply create a folder there and set it as application folder, the
default user for the IIS is "IUSR_Name".
That is the default internet guest account for IIS and I have checked it
from the user list, it is a member of "Guests".


Thanks,
Tee
 
Back
Top