¿Bug IIS? php on iis 6 read c:\ without permissions

[fasis]

Hi everybody!

I have a file manager based on PHP. In his config file the document root is
for example

c:\domains\domain1

then I make an user (for example userdomain1) with permission on this
folder.
I don´t want that this user can read folders upper c:\domains\dom. Althought
userdomain1 only have permissions in this folder.

But if a I modified config file and write like document root "c:\" I can
read and see all the folders even the user don´t have permission.

What can I do?

Thanks

[weekender]

php can read files above the doc root on the server - the files above the doc root can't be accessed externally

i think iis uses a system user called INET_USR or something if you need to change permissions

adam

[MarkR]

PHP is limited by the OS permissions on directories; if this is not enough, consider using safe_mode

Safe mode can be configured (with some effort) to allow different access on a per site basis if you're running virtual hosts.

Mark