none
Upload folder location RRS feed

  • Question

  • I am developing a web app using ASP.NET, C# which allows uses to upload some files.
    From security point of view, which is the best location for storing uploaded files ? 
    1) a folder located under C:\Inetpub\wwwroot\MyApp\Upload   OR
    2) a folder outside the C:\Inetpub  eg. C:\MyApp\Upload.
    Please explain why ?
    Friday, April 24, 2009 6:54 PM

All replies

  • Hi

    • I think that C\MyApp\UpLoad. The physical location of the project in the server is mapped with the IIS installed in your machine.
    • Please give more important to authenticating features provided along with the IIS web servers.
    • Please do not comprise on security on the IIS .

    Some links are given below

    • http://www.authenticationtutorial.com/tutorial/
       
     IIS USER AUTHENTICATION TUTORIAL:
    • http://www.tech-faq.com/user-authentication-in-iis.shtml

    Regards,
    Phijo Mathew Philip.

    PHIJO MP
    Saturday, April 25, 2009 2:55 PM