Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

We are using an IIS 6.0 server on a Windows 2003 machine. We need to allow PHP to upload Word documents to a folder on our website that can then be read by visitors to the site. We do not want to grant the anonymous IUSER write access. So, what is the best way to do this without compromising security?

share|improve this question

migrated from stackoverflow.com Sep 10 '11 at 13:00

This question came from our site for professional and enthusiast programmers.

1 Answer 1

You should make a service user and run the application pool for that site as the user. Then grant that user the permission to write to whatever folder you want. One way or another, someone is going to have to get write access, whether is the anonymous account or the service account.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.