On Fri, 2001-11-02 at 00:36, Daymon McCartney wrote: > I'm trying to articulate the reasons why it's better to place the root of a > website on a separate partition, or at least in a separate directory from > the application which uses IIS as a front-end...
I'm new around here, so maybe I'm off the mark here, but.... Wouldn't the best reason to use a separate partition be to prevent an attack which exploits relative pathnames (i.e., ../../winnt/system32/cmd.exe), as relative paths cannot traverse different partitions? At least that's what I've read on some web sites about IIS partitioning..... -- Kirk to Enterprise - Bean down Yeoman Rand and a six pack.
