|
security
newsgroups
|
|||||||||||||||||||||||
|
|||||||||||||||||||||||
IIS 6 and % characters in a URLHi All,
if you have a file name with a % in iis blocks the request and i cant find where to change it, it's not urlscan but a core option. Any idea where i can change this? On Mon, 6 Jun 2005 05:17:17 -0700, "Sean O'Callaghan" <Sean
O'Callag***@discussions.microsoft.com> wrote: >if you have a file name with a % in iis blocks the request and i cant find The percent character "%" doesn't work because it indicates an ASCII>where to change it, it's not urlscan but a core option. > >Any idea where i can change this? character code follows. So this URL: http://www.sample.com/discount%2005.htm Actually translates to this: http://www.sample.com/discount 05.htm That's not the name of the file so it doesn't get found. Don't use the percent character in file names. Jeff
Show quote
Hide quote
"Jeff Cochran" <jeff.nospam@zina.com> wrote in message But %26 indicates a % right? :-)news:42a61d79.195806875@msnews.microsoft.com... : On Mon, 6 Jun 2005 05:17:17 -0700, "Sean O'Callaghan" <Sean : O'Callag***@discussions.microsoft.com> wrote: : : >if you have a file name with a % in iis blocks the request and i cant find : >where to change it, it's not urlscan but a core option. : > : >Any idea where i can change this? : : The percent character "%" doesn't work because it indicates an ASCII : character code follows. So this URL: : : http://www.sample.com/discount%2005.htm : : Actually translates to this: : : http://www.sample.com/discount 05.htm : Cheers Ken Hi Guys thanks for the info.
What i am refering to is if i have two files in the root of the wwwroot folder one called sean%me.doc and one called sean_me.doc the later works but the former does not, IIS is blocking the request and it gets ritten to the http log files. URLSCAN use to block this, but i can;t find a setting in 6.0 to change this. Cheers, Sean Show quoteHide quote "Ken Schaefer" wrote: > "Jeff Cochran" <jeff.nospam@zina.com> wrote in message > news:42a61d79.195806875@msnews.microsoft.com... > : On Mon, 6 Jun 2005 05:17:17 -0700, "Sean O'Callaghan" <Sean > : O'Callag***@discussions.microsoft.com> wrote: > : > : >if you have a file name with a % in iis blocks the request and i cant > find > : >where to change it, it's not urlscan but a core option. > : > > : >Any idea where i can change this? > : > : The percent character "%" doesn't work because it indicates an ASCII > : character code follows. So this URL: > : > : http://www.sample.com/discount%2005.htm > : > : Actually translates to this: > : > : http://www.sample.com/discount 05.htm > : > > But %26 indicates a % right? :-) > > Cheers > Ken > > > On Tue, 7 Jun 2005 00:08:01 -0700, "Sean"
<S***@discussions.microsoft.com> wrote: >Hi Guys thanks for the info. Got a log file entry as an example?> >What i am refering to is if i have two files in the root of the wwwroot >folder one called sean%me.doc and one called sean_me.doc the later works but >the former does not, IIS is blocking the request and it gets ritten to the >http log files. URLSCAN use to block this, but i can;t find a setting in 6.0 >to change this. Jeff Show quoteHide quote >Cheers, >Sean > >"Ken Schaefer" wrote: > >> "Jeff Cochran" <jeff.nospam@zina.com> wrote in message >> news:42a61d79.195806875@msnews.microsoft.com... >> : On Mon, 6 Jun 2005 05:17:17 -0700, "Sean O'Callaghan" <Sean >> : O'Callag***@discussions.microsoft.com> wrote: >> : >> : >if you have a file name with a % in iis blocks the request and i cant >> find >> : >where to change it, it's not urlscan but a core option. >> : > >> : >Any idea where i can change this? >> : >> : The percent character "%" doesn't work because it indicates an ASCII >> : character code follows. So this URL: >> : >> : http://www.sample.com/discount%2005.htm >> : >> : Actually translates to this: >> : >> : http://www.sample.com/discount 05.htm >> : >> >> But %26 indicates a % right? :-) >> >> Cheers >> Ken >> >> >>  
Other interesting topics
Permission denied when writing to eventlog from global.asa
Secure website (cookie/session) secure site - multiple users w/ 1 user account? 401 errors filling logfile Making unique URL - internal and external Your opinion on SSL and common URL to access site from internal and external IP address and domain name restrictions not available?. SSL for FTP Problem with IUSR account Application Identity |
|||||||||||||||||||||||
