Article ID: 151963 - Last Review: June 23, 2005 - Revision: 1.2

CGI Scripts Must Use Full Directory Path

This article was previously published under Q151963
We strongly recommend that all users upgrade to Microsoft Internet Information Services (IIS) version 6.0 running on Microsoft Windows Server 2003. IIS 6.0 significantly increases Web infrastructure security. For more information about IIS security-related topics, visit the following Microsoft Web site:
http://www.microsoft.com/technet/security/prodtech/IIS.mspx (http://www.microsoft.com/technet/security/prodtech/IIS.mspx)
Expand all | Collapse all

SYMPTOMS

CGI scripts that manipulate files in directories other than where the CGI script is executed will not run correctly if the CGI script references virtual directory aliases rather than the full path to the file.

CAUSE

The Internet Information Server (IIS) CGI interface does not recognize virtual directory names.

RESOLUTION

For example, when you open a file, use the following:
   c:\inetsrv\scripts\data\mycgidata.txt
				

instead of the following:
   /scripts/data/mycgi.txt.
				

STATUS

Microsoft has confirmed this to be a problem in Microsoft Internet Information Server version 1.0. We are researching this problem and will post new information here as it becomes available.

APPLIES TO
  • Microsoft Internet Information Server 1.0
Keywords: 
kbnetwork KB151963
 

Article Translations