![]() |
![]() |
![]() |
![]()
|
Introduction Regardless of what software you are running, there are two major security issues when you host Web sites from your computer.
Hosting Web sites, even on an intranet, opens your host computer to a wider community of users. Authentication is the process of allowing users access to a Web service based on user names and passwords, or on IP addresses. (Restricting users by IP address is less secure, because clever users can "spoof" an IP address and gain access to the host computer.) The content of a Web site can cause programs to be run on your host computer. An HTML page that "includes" or "substitutes" another page can cause a program to be run on the host computer. Marking directories as executable to allow a script to run on the host computer can allow a program to do anything within the limits of the host computer's resource-protection scheme. HTML pages can contain embedded controls, scripts, applets, and other programs that can cause programs to run on a host computer. Form handlers can introduce a further risk, because users can submit commands from within form fields, causing programs to be run when the page containing the form results is browsed. (Form handlers in Microsoft® FrontPage® do not allow this.)
FrontPage addresses these security issues by using the built-in security mechanisms of the host computer. Using the FrontPage Server Extensions requires no changes to the host computer's security method:
Learn about FrontPage Server Extensions security on Microsoft Windows NT.
|
![]() |
TOP![]() |
||
Last Updated June 1999 ©1999 Microsoft Corporation. All rights reserved. Terms of Use. Disclaimer |