IE security issue

adi

Hi! I have this problem with a security program im writting (in V😎. The program should prevent access to local folders and files on a PC that serves as an Internet access point in a library.The problem appears when somebody types a local adress in the adress bar (E.g: "file://c:\" , "Desktop") .
I found something here http://support.microsoft.com/defaul...kb;en-us;179221

Modifying the registry key (HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ Explorer) as indicated by MS prevents access to all files and folders but when typing "Desktop" it still grants access.
What should i do?
Thanks!

Moonglobe

not use windows?

adi

What?

DigitalExpl0it

The Requested Web Page is Not Available

Moonglobe

you asked "what should i do?" so i gave my honest advice...

adi

@
Unfortunaly i dont get to choose.Its somebody elses bad choice.

dalecosp

Hmm, symlink "Desktop" to the Recycle Bin?

j/k...

Hmm, in more "advanced" (NT/2000/XP) versions of MS Win, there may be "local policy" settings that you could change to bar users from sections of the file system. As FAT and FAT32 have no concept of permissions, I'd have no idea what to do with win9x....

Now, were this PHP we were talking about, I'd just:

if (stristr("Desktop", $_REQUEST['URI'])) {
     die("You're not allowed to see the Desktop...");
}

I don't know if you can do something like that in your app or not....

Do you suppose there's some Windows or Security or Visual Basic programming forum where you might find knowledgeable folk?

Good luck...