Browse by Tags

SQL Injection rule explanation how URLScan 3.0 scans requests
27 June 08 10:52 AM | steve schofield | with no comments

One of the things I was curious what URLScan actually scanned and how. What is just servervariables or what?! I asked Wade H from the IIS Team for further explaination. It is good to be aware when you are implementing URLScan 3.0 and sql injection rules...

Filed under: IIS, sql injection

URLScan 3.0 - help with sql injection attacks.
24 June 08 11:55 PM | steve schofield | with no comments

For those supporting a Classic ASP and ASP.NET application, you probably have noticed an increase in sql injection attempts. Microsoft has released an updated URLScan 3.0. Here is the link to download URlScan version 3 beta for 32 bit or 64 bit . You...

Filed under: IIS, sql injection

SQL Injection information for IIS admins and developers
23 June 08 12:51 AM | steve schofield | 3 comment(s)

The sql injection that has came up is affecting several ASP and ASP.NET applications. Although the only way to prevent an attack is validate the code, hopefully these posts will provide some direction. I included some links that discuss this more. http...

Filed under: IIS, sql injection

IIS 7 - post #68 - URL Rewrite module available
30 May 08 05:28 PM | steve schofield | 3 comment(s)

Exciting news for IIS 7.0 users. MS has released the much anticipated URL Rewrite module. Here is a post on it. http://learn.iis.net/page.aspx/460/using-url-rewrite-module/ Download the x86 CTP version for IIS 7.0: http://www.iis.net/downloads/default...

Filed under: IIS

IIS7 - post #67 - New command line reference site http://appcmd.com
24 May 08 07:10 AM | steve schofield | 4 comment(s)

I'm not sure if humans are supposed to remember command line syntax. For me, the most frustrating part is remembering the syntax of a certain command line option. To help me remember these for future use, and hopefully share with the community. I created...

Filed under: IIS

Early Christmas present in May - DFS file replication on Windows Server 2008 web edition
14 May 08 09:03 PM | steve schofield | with no comments

Whoo hoo! DFS replication is available on web edition. This will make shared config and local contention replication possible on web edition. This is a HUGE deal. http://blogs.technet.com/filecab/archive/2008/05/14/installing-dfs-replication-on-windows...

Filed under: IIS

IIS 7.0, Access 2007 and ASP.NET 2.0
03 May 08 12:09 AM | steve schofield | 2 comment(s)

I don't get a chance to write webpage code very often, but in my early days of doing samples, it was common to use an Access database. Access 2007 is the latest version available. The drivers weren't installed on my Windows Server 2008 server when I was...

Filed under: Access2007, IIS

IIS 7.0 Shared configuration.
01 May 08 12:27 AM | steve schofield | 2 comment(s)

One of my favorite features in IIS 7.0 is shared configuration. It makes setting up and maintaining a web-farm a piece of cake. Here are some articles I found on the topic. Shared configuration http://learn.iis.net/page.aspx/264/shared-configuration/...

Filed under: IIS

IIS7 - post #66 - Installing PERL on IIS 7.0
06 April 08 12:36 AM | steve schofield | with no comments

Here are three links that discuss installing how-to install PERL on IIS 7.0. http://www.freenetbuilders.com/index.php?option=com_content&task=view&id=52&Itemid=54 http://forums.iis.net/t/1146580.aspx?PageIndex=1 http://forums.iis.net/t/1146580...

Filed under: IIS, perl

IIS7 - post #65 - IIS Manager extensibility experiences
31 March 08 10:10 PM | steve schofield | with no comments

I'm attempting to write a plugin for the product I developed to handle IIS and related log files. http://www.iislogs.com Right now, the way you manage IISLogs is using a Winforms application or updating the config file directly. Microsoft has made it...

Filed under: IIS