IE7 and IIS FTP

re: IE7 and IIS FTP

Kimberly — Tue, 19 Dec 2006 03:51:00 GMT

It's Microsoft "breaking things that used to work" and calling it "more secure". (Yet STILL leaving holes in other areas... and NOT fixing them at all.)

Smart move (again) guys.

re: IE7 and IIS FTP

qbernard — Wed, 22 Nov 2006 02:57:12 GMT

Thanks for sharing, Terry. I'm not really a hard and fast RFC fans. I'm just a normal user that expect things to work as it is in IE6.0 :)

re: IE7 and IIS FTP

Mike — Tue, 21 Nov 2006 17:30:16 GMT

I agree...something has changed and this is an absolute mess

re: IE7 and IIS FTP

Terry Schwarz — Tue, 21 Nov 2006 02:46:43 GMT

You mean ... this part of the spec ... RFC 1738 Uniform Resource Locators (URL) December 1994 ... blah ... blah ... blah page 7 ...

For example, the URL <URL:ftp://myname@host.dom/%2Fetc/motd> is

interpreted by FTP-ing to "host.dom", logging in as "myname"

(prompting for a password if it is asked for), and then executing

"CWD /etc" and then "RETR motd". This has a different meaning from

<URL:ftp://myname@host.dom/etc/motd> which would "CWD etc" and then

"RETR motd"; the initial "CWD" might be executed relative to the

default directory for "myname". On the other hand,

<URL:ftp://myname@host.dom//etc/motd>, would "CWD " with a null

argument, then "CWD etc", and then "RETR motd".

I read this as double slash (//) means start from root and single slash is mention as relative. It does say anything about single means root.

Every other browser in the universe I've used works relative path. MS should either justify there position by speaking up or fix there crappy software!

re: IE7 and IIS FTP

qbernard — Thu, 16 Nov 2006 06:30:32 GMT

Well, this works on IE 6. Next on the restrict part, it needs a mininum read at the root before can redirect. And in user isolation mode, it get stuck in root as well. So something differently changed in IE7 as compare with the previous version.

re: IE7 and IIS FTP

Alun Jones — Wed, 15 Nov 2006 20:45:50 GMT

This sounds like typical FTP: URL behaviour.

Remember that ftp://user:password@site.example.com/ means to log on to the FTP server at site.example.com, using user "user", and password "password", then CWD to the root, before producing a listing.

Not perhaps what you expect, but not without precedent.

Perhaps you need to configure your FTP server such that it restricts the user's directory structure in such a way that the home directory appears to be the root directory, then you don't have this problem.