You can't secure what you don't acknowledge.SM

Thursday, February 7, 2008

Be careful with old/backup files on your Web server

If you're running an ASP-based site on an IIS server (of course), check for any old or backup .asp files that have been renamed with a .old, .bak, or similar extension. If present, the pages won't be rendered and delivered as the original ASP files would be. Instead, the actual source code is revealed. Not good for business.

Oh, this could just as easily happen other platforms. I just had Microsoft on the brain and wanted to get this out there.

No comments:

Post a Comment