Solved

Help setting permissions in plesk or IIS

Posted on 2007-11-27
8
2,099 Views
Last Modified: 2013-12-24
Hi

I have some websites on a server that is running IIS and Plesk

This sites are structured like this:

C:\Inetpub\vhosts\one-domain.com
C:\Inetpub\vhosts\another-domain.com
C:\Inetpub\vhosts\yet-another-domain.com

My problem is that I would like to upload a file to a domian from another. So a script can be executed in http://www.one-domain.com/script.php and then create a file on http://www.another-domain.com/new_file.jpg.

How do I do that?



0
Comment
Question by:koldstar
  • 4
  • 4
8 Comments
 
LVL 37

Expert Comment

by:meverest
ID: 20362093
Hi,

allowing that kind of cross site scripting is potentially dangerous, but you can acheive this by:

1.  give modify permissions to the interactive user (i.e. authenticated or anonymous) to both web roots (as in using windows explorer security properties, or use cacls.exe etc)
2.  check 'allow parent paths' under application properties (click 'configuration' button on 'home page' panel of web site properties.

Cheers.
0
 

Author Comment

by:koldstar
ID: 20364785
Thanks,

But I can't get it to work. After setting "allow parent paths" I can go up one more level than before.

Before I could see: C:\Inetpub\vhosts\one-domain.com\httpdocs\ and now I can see C:\Inetpub\vhosts\one-domain.com\. But I still get the permission denied error when trying to access antother domain or C:\Inetpub\vhosts\.

Due to the security risk, I was thinking if it was better to make the other domains into subfolders to "one-domain.com."

Example:

C:\Inetpub\vhosts\one-domain.com\httpdocs\ customers\another-domain.com
C:\Inetpub\vhosts\one-domain.com\httpdocs\ customers\yet-another-domain.com

Is this a safer way? And how do I set this up?

/R




0
 
LVL 37

Expert Comment

by:meverest
ID: 20365123
Hi,

I'm not entirely sure that I understand exactly what you are wanting to achieve - perhaps if you explain what or why you want to do that, we might be able to think fo another way to achieve the same result?

I think that if I needed to do something like that, I would prefer to run a script every couple of minutes to copy from one folder to the other.

Cheers.
0
 

Author Comment

by:koldstar
ID: 20366093
Hi
The reason for all this is that I'm devolping a CMS. I would like the backend to be located on one domain and all the frontends on differents domains. I could solve the problem by uploading pictures and other files to the CMS-domain, but the customers webpage looks more professional when pictures are located on the same domain.
Another way to do this is to create a script that uploads the files through FTP, to the customers domain.. But I think this is a bit waste og resources and it requires me to make a special ftp-accound every time I add a new customer.
0
IT, Stop Being Called Into Every Meeting

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

 
LVL 37

Expert Comment

by:meverest
ID: 20370329
Hi,

what about if you created a virtual 'images' folder under each web site.  so that:

www.somedomain.com/images maps to www.cms-site.com/application/imagedomain1

Cheers.
0
 

Author Comment

by:koldstar
ID: 20372281
That could work.

I just tried to create a virtual directory, but I can't set the path to another website in Plesk. It only allows paths like this: /httpdocs/images

I need it to go 2 folders "deeper".

Is there another way to change this? Maybe outside plesk?
0
 
LVL 37

Accepted Solution

by:
meverest earned 125 total points
ID: 20377293
Hello,

unfortunately, I am no plesk expert, but it certainly can be done using asp.NET and adsi.

take a look at this as a starter: http://www.iisfaq.com/Default.aspx?tabid=2709

regards,  Mike.
0
 

Author Closing Comment

by:koldstar
ID: 31411232
Hi

Sorry about the delay. I gave up and had a guy set it up for me...
0

Featured Post

IT, Stop Being Called Into Every Meeting

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

Join & Write a Comment

Nothing in an HTTP request can be trusted, including HTTP headers and form data.  A form token is a tool that can be used to guard against request forgeries (CSRF).  This article shows an improved approach to form tokens, making it more difficult to…
This article discusses four methods for overlaying images in a container on a web page
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.

706 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

19 Experts available now in Live!

Get 1:1 Help Now