Solved

Help setting permissions in plesk or IIS

Posted on 2007-11-27
8
2,104 Views
Last Modified: 2013-12-24
Hi

I have some websites on a server that is running IIS and Plesk

This sites are structured like this:

C:\Inetpub\vhosts\one-domain.com
C:\Inetpub\vhosts\another-domain.com
C:\Inetpub\vhosts\yet-another-domain.com

My problem is that I would like to upload a file to a domian from another. So a script can be executed in http://www.one-domain.com/script.php and then create a file on http://www.another-domain.com/new_file.jpg.

How do I do that?



0
Comment
Question by:koldstar
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 4
8 Comments
 
LVL 37

Expert Comment

by:meverest
ID: 20362093
Hi,

allowing that kind of cross site scripting is potentially dangerous, but you can acheive this by:

1.  give modify permissions to the interactive user (i.e. authenticated or anonymous) to both web roots (as in using windows explorer security properties, or use cacls.exe etc)
2.  check 'allow parent paths' under application properties (click 'configuration' button on 'home page' panel of web site properties.

Cheers.
0
 

Author Comment

by:koldstar
ID: 20364785
Thanks,

But I can't get it to work. After setting "allow parent paths" I can go up one more level than before.

Before I could see: C:\Inetpub\vhosts\one-domain.com\httpdocs\ and now I can see C:\Inetpub\vhosts\one-domain.com\. But I still get the permission denied error when trying to access antother domain or C:\Inetpub\vhosts\.

Due to the security risk, I was thinking if it was better to make the other domains into subfolders to "one-domain.com."

Example:

C:\Inetpub\vhosts\one-domain.com\httpdocs\ customers\another-domain.com
C:\Inetpub\vhosts\one-domain.com\httpdocs\ customers\yet-another-domain.com

Is this a safer way? And how do I set this up?

/R




0
 
LVL 37

Expert Comment

by:meverest
ID: 20365123
Hi,

I'm not entirely sure that I understand exactly what you are wanting to achieve - perhaps if you explain what or why you want to do that, we might be able to think fo another way to achieve the same result?

I think that if I needed to do something like that, I would prefer to run a script every couple of minutes to copy from one folder to the other.

Cheers.
0
Secure Your WordPress Site: 5 Essential Approaches

WordPress is the web's most popular CMS, but its dominance also makes it a target for attackers. Our eBook will show you how to:

Prevent costly exploits of core and plugin vulnerabilities
Repel automated attacks
Lock down your dashboard, secure your code, and protect your users

 

Author Comment

by:koldstar
ID: 20366093
Hi
The reason for all this is that I'm devolping a CMS. I would like the backend to be located on one domain and all the frontends on differents domains. I could solve the problem by uploading pictures and other files to the CMS-domain, but the customers webpage looks more professional when pictures are located on the same domain.
Another way to do this is to create a script that uploads the files through FTP, to the customers domain.. But I think this is a bit waste og resources and it requires me to make a special ftp-accound every time I add a new customer.
0
 
LVL 37

Expert Comment

by:meverest
ID: 20370329
Hi,

what about if you created a virtual 'images' folder under each web site.  so that:

www.somedomain.com/images maps to www.cms-site.com/application/imagedomain1

Cheers.
0
 

Author Comment

by:koldstar
ID: 20372281
That could work.

I just tried to create a virtual directory, but I can't set the path to another website in Plesk. It only allows paths like this: /httpdocs/images

I need it to go 2 folders "deeper".

Is there another way to change this? Maybe outside plesk?
0
 
LVL 37

Accepted Solution

by:
meverest earned 125 total points
ID: 20377293
Hello,

unfortunately, I am no plesk expert, but it certainly can be done using asp.NET and adsi.

take a look at this as a starter: http://www.iisfaq.com/Default.aspx?tabid=2709

regards,  Mike.
0
 

Author Closing Comment

by:koldstar
ID: 31411232
Hi

Sorry about the delay. I gave up and had a guy set it up for me...
0

Featured Post

Flexible connectivity for any environment

The KE6900 series can extend and deploy computers with high definition displays across multiple stations in a variety of applications that suit any environment. Expand computer use to stations across multiple rooms with dynamic access.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

For many of us, the  holiday season kindles the natural urge to give back to our friends, family members and communities. While it's easy for friends to notice the impact of such deeds, understanding the contributions of businesses and enterprises i…
This article is a collection of issues that people face from time to time and possible solutions to those issues. I hope you enjoy reading it.
Internet Business Fax to Email Made Easy - With  eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, f…
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.

732 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question