I added and gave the "Authenticated User" group modify/read/list/write permissions to one sub-folder inside the wwwroot folder. Will doing this cause a security hole?
Is so, what is a better alternative? Better still, is there a way I can give only the PHP.exe permission to write to this directory?
I did this to allow PHP (using Joom!a CMS) to be able to write to certain directories within that sub-directory. However, just giving the IIS_IUSRS or IUSR write and modify access did not work.