页面托管asp.net
我将项目(asp.net3.5)托管在服务器中.使用其IP访问该页面.
例如
http://127.0.0.7/Home
问题是,如果他输入http://127.0.0.7/Home/Pages
,则可以查看我的项目文件夹
pages是我的项目所在的项目中的文件夹.尽管无法访问具有访问权限的页面.他可以轻松浏览我的报告,并从中下载我的文件(* .xls,*.txt ..),即使他没有源代码,也可以暴露整个项目结构.
请帮助........
在此先感谢......
I hosted my project (asp.net3.5)in a Server. The page is accessed using its IP.
For instance
http://127.0.0.7/Home
The problem is one can view my project folder if he types in http://127.0.0.7/Home/Pages
pages is a folder in my project where my pages resides. although One cant access the pages with access rights. He can easily go through my reports and download my files(*.xls,*.txt..)from it,that is the whole project structure will get exposed, even though he wont get the source code .......
Please Help........
Thanks in advance......
您需要在IIS中更改权限.您可以做的是,除运行您网站的帐户外,不允许任何人读取这些文件.
You need to change the permissions in IIS. What you can do is do not allow anyone to read these files except the account under which your website is running.