Securing IIS folders.

[michaelsanford]

I'm designing a vCard updater application in PHP and while I was writin the documentiaton I added "Make sure you secure the data directory : in Apache using .htaccess and in Windows..." I was at a loss to give a procedure for any Windows-based server.

I asked my friend in computer science and he fixed it for me : "in Apache using .htaccess, and in Windows by using Apache".

 

[scruffy]

Woo! Yeah, that's pretty much it.

You can use NTFS permissions in IIS, but that means there actually has to be system level accounts for each of the users that authenticate, and they're authenticating using real system passwords. I've always thought that was very scary - to limit access to certain people, you have to actually create them accounts on your web server's OS, not just in a .htaccess-like mechanism...

 

[michaelsanford]

That is kind of scary, and stupid.