Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Web-App-Sec
[Top] [All Lists]

Re: force extention handling in IIS?

Subject: Re: force extention handling in IIS?
Date: Mon, 14 Feb 2005 03:31:52 -0500
In addition, you could write an isapi filter that simply
remaps all requests to file.asp to file.php. This would
enable all your other asp scripts to keep running using the
asp script mapping and you can be selective about which
files to remap.



On Mon, 14 Feb 2005 08:29:16 +0200
 "Damhuis Anton" <DamhuisA@aforbes.co.za> wrote:

I have never tried it, but maybe a Server.Transfer to the
PHP page?

With Server.Transfer the client still sees the original
page (.asp) but it will be processed but the second page.

Another option is to change the engine reference in IIS

Open IIS
Right Click your WEBSite,
Select 'Home Directory' tab.
Click Configuration button.
In Application Mappings List select .asp
Click Edit.
Enter the PHP Engine Dll Name in executable text box.

This will make sure that ALL .asp extensions in the
selected web site will use the PHP Engine.

Regards
  Anton

-----Original Message-----
From: Leigh Morresi [mailto:leighm@linuxbandwagon.com]
Sent: 14 February 2005 01:29
To: webappsec@securityfocus.com
Subject: force extention handling in IIS?


Hi there

Trying to fix some loose ends by initally rewriting a
couple of ASP
scripts as PHP
is it possible to force IIS (6.0) to run a file.asp with
PHP? i cant
change the filename because
we have a lot of clients with some 3rd party applicaiton
that is
connecting to the "file.asp"

IIS will let me run PHP scripts and set the file
extention but not on a
per-filename basis

any ideas?

leigh


--
There's an interesting phenomenon that's known as "Andy
giveth, and
Bill taketh away" No matter how fast processors get,
software
consistently finds new ways to eat up the extra speed.

Confidentiality Warning
=======================
The contents of this e-mail and any accompanying
documentation
are confidential and any use thereof, in what ever form,
by anyone
other than the addressee is strictly prohibited.

---------------------------------------------------------------------
Web mail provided by NuNet, Inc. The Premier National provider.
http://www.nni.com/

<Prev in Thread] Current Thread [Next in Thread>