WebApp Sec mailing list archives

Re: force extention handling in IIS?


From: "Adam Tuliper" <amt () gecko-software com>
Date: Mon, 14 Feb 2005 03:31:52 -0500

In addition, you could write an isapi filter that simply
remaps all requests to file.asp to file.php. This would
enable all your other asp scripts to keep running using the
asp script mapping and you can be selective about which
files to remap.



On Mon, 14 Feb 2005 08:29:16 +0200
 "Damhuis Anton" <DamhuisA () aforbes co za> wrote:

I have never tried it, but maybe a Server.Transfer to the
PHP page?

With Server.Transfer the client still sees the original
page (.asp) but it will be processed but the second page.

Another option is to change the engine reference in IIS

Open IIS
Right Click your WEBSite,
Select 'Home Directory' tab.
Click Configuration button.
In Application Mappings List select .asp
Click Edit.
Enter the PHP Engine Dll Name in executable text box.

This will make sure that ALL .asp extensions in the
selected web site will use the PHP Engine.

Regards
  Anton

-----Original Message-----
From: Leigh Morresi [mailto:leighm () linuxbandwagon com]
Sent: 14 February 2005 01:29
To: webappsec () securityfocus com
Subject: force extention handling in IIS?


Hi there

Trying to fix some loose ends by initally rewriting a
couple of ASP
scripts as PHP
is it possible to force IIS (6.0) to run a file.asp with
PHP? i cant
change the filename because
we have a lot of clients with some 3rd party applicaiton
that is
connecting to the "file.asp"

IIS will let me run PHP scripts and set the file
extention but not on a
per-filename basis

any ideas?

leigh


--
There's an interesting phenomenon that's known as "Andy
giveth, and
Bill taketh away" No matter how fast processors get,
software
consistently finds new ways to eat up the extra speed.

Confidentiality Warning
=======================
The contents of this e-mail and any accompanying
documentation
are confidential and any use thereof, in what ever form,
by anyone
other than the addressee is strictly prohibited.

---------------------------------------------------------------------
Web mail provided by NuNet, Inc. The Premier National provider.
http://www.nni.com/


Current thread: