I am setting up windows EC2 server. I have created a website in that server using IIS. After creation IIS, assign them pool by default whose identity is ApplicationPoolIdentity. Website works fine.

However, I have set up a file upload script in one of those site and without setting of any extra permission that script is able to upload file in any folder. I consider kind of these things dangerous. When I was working on shared hosting I needed to specify which folder I need to set write permission otherwise I cannot upload.

How can I prevent write access to other folder than I choose?

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.