RE: [PHP-WIN] Configuring securely in IIS5 under Windows 2000 Server

2002-04-12 Thread Svensson, B.A.T. (HKG)
> Bruce, > > Thanks for all of you input, it is much appreciated it. > > I do know about securing IIS, but I was concerned about security when > adding PHP into the mix. > > From the answers I received, I am assuming that the security is in the > OS/Server software, and that there aren't any

RE: [PHP-WIN] Configuring securely in IIS5 under Windows 2000 Server

2002-04-11 Thread Svensson, B.A.T. (HKG)
> >>All PHP does, is create a dynamic webpage, ie create a web page > >>"on-the-fly". This does not expose any holes any more than creating an > >> html page does. > > not true - PHP is as secure as the pages you program. > lack of user input verification is a good example. If you wants to be ph

RE: [PHP-WIN] Configuring securely in IIS5

2002-04-03 Thread olinux
> Sent: Monday, April 01, 2002 10:52 AM > To: Eric Gentry; [EMAIL PROTECTED] > Subject: RE: [PHP-WIN] Configuring securely in IIS5 > > > A good place to start may be the IIS Lockdown Tool: > > http://www.microsoft.com/WINDOWS2000/downloads/recommended/iislockdown/d > e

RE: [PHP-WIN] Configuring securely in IIS5 under Windows 2000 Server

2002-04-02 Thread Ross Fleming
MAIL PROTECTED]] Sent: 02 April 2002 18:25 To: [EMAIL PROTECTED] Subject: RE: [PHP-WIN] Configuring securely in IIS5 under Windows 2000 Server >>All PHP does, is create a dynamic webpage, ie create a web page >>"on-the-fly". This does not expose any holes any more than creating

RE: [PHP-WIN] Configuring securely in IIS5 under Windows 2000 Server

2002-04-02 Thread Bryan Henry
~ b r y a n -Original Message- From: Bryan Henry [mailto:[EMAIL PROTECTED]] Sent: Tuesday, April 02, 2002 11:25 AM To: [EMAIL PROTECTED] Subject: RE: [PHP-WIN] Configuring securely in IIS5 under Windows 2000 Server >>All PHP does, is create a dynamic webpage, ie create a web page

RE: [PHP-WIN] Configuring securely in IIS5 under Windows 2000 Server

2002-04-02 Thread Bryan Henry
-Original Message- From: Ross Fleming [mailto:[EMAIL PROTECTED]] Sent: Tuesday, April 02, 2002 10:51 AM To: Eric Gentry; [EMAIL PROTECTED] Subject: RE: [PHP-WIN] Configuring securely in IIS5 under Windows 2000 Server So far as I'm aware, you're correct, secure IIS and php is s

RE: [PHP-WIN] Configuring securely in IIS5 under Windows 2000 Server

2002-04-02 Thread Ross Fleming
l Message- From: Eric Gentry [mailto:[EMAIL PROTECTED]] Sent: 02 April 2002 16:28 To: [EMAIL PROTECTED] Subject: RE: [PHP-WIN] Configuring securely in IIS5 under Windows 2000 Server Bruce, Thanks for all of you input, it is much appreciated it. I do know about securing IIS, but I was conc

RE: [PHP-WIN] Configuring securely in IIS5 under Windows 2000 Server

2002-04-02 Thread Eric Gentry
Subject: RE: [PHP-WIN] Configuring securely in IIS5 under Windows 2000 Server Eric et al; START BY MAKING A FULL AND COMPLETE BACKUP OF YOUR MACHINE! IF you make an error with USERS, GROUPS and PERMISSIONS, you might lock yourself completely out of the machine and not be able to regain access

RE: [PHP-WIN] Configuring securely in IIS5 under Windows 2000 Server

2002-04-01 Thread Bruce Barnes
ailto:[EMAIL PROTECTED] http://www.ChicagoNetTech.com 773.365.0105 Office 773.365.0108 Fax 773.491.9019 Cell ========== Secure & Encrypted Remote Data Backup Server Co-Location Services Computer Network Design, Installation & Maintenance Telecomm Network

RE: [PHP-WIN] Configuring securely in IIS5

2002-04-01 Thread Eric Gentry
ailto:[EMAIL PROTECTED]] Sent: Monday, April 01, 2002 10:52 AM To: Eric Gentry; [EMAIL PROTECTED] Subject: RE: [PHP-WIN] Configuring securely in IIS5 A good place to start may be the IIS Lockdown Tool: http://www.microsoft.com/WINDOWS2000/downloads/recommended/iislockdown/d efau lt.asp -Ori

RE: [PHP-WIN] Configuring securely in IIS5

2002-04-01 Thread Robin Bolton
] Configuring securely in IIS5 I have been able to install php and get it running on our test server running IIS5. Everything is going fine, but now I am beginning to ponder the question, how do I secure this when it goes live? I have read through the installation documentation, and read the security

[PHP-WIN] Configuring securely in IIS5

2002-04-01 Thread Eric Gentry
I have been able to install php and get it running on our test server running IIS5. Everything is going fine, but now I am beginning to ponder the question, how do I secure this when it goes live? I have read through the installation documentation, and read the security chapter of the php manual