A. Its possible to use #exec commands from within a HTML page to enable calling commands on the web server. By default this is enabled in IIS 4.0 but DISABLED by default in IIS 5.0. The default state change was changed to prevent the running of unauthorized server-side executables. To manually set/confirm the state perform the following:
- Start the registry editor (regedit.exe)
- Move to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W3SVC\Parameters
- If SSIEnableCmdDirective does not exist create it of type REG_DWORD
- Double click SSIEnableCmdDirective value and set to 1 to enable or 0 to disable. Click OK
- Close the registry editor
- Stop and start the WWW service (or reboot) for the change to take effect
To stop and start from the command line perform the following:
C:\><b> net stop w3svc</b><br> C:\><b> net start w3svc</b>
1 comment
Hide comments
