Forum Moderators: open

Message Too Old, No Replies

Security issue with uploading from a web page

godaddy won't let me upload

         

skeletor

1:44 pm on Mar 20, 2008 (gmt 0)

10+ Year Member



Hey everyone. I recently got a domain through godaddy and I'm using their free hosting to test out a website idea. I'm trying to make a website where users can upload certain types of files to the server. I'm using ASP 3.5 and IIS 7.0. I made a simple upload page and I've gotten it to load up, but whenever I try to save a file I get the following error:

Security Exception
Description: The application attempted to perform an operation not allowed by the security policy. To grant this application the required permission please contact your system administrator or change the application's trust level in the configuration file.

Exception Details: System.Security.SecurityException: Request for the permission of type 'System.Security.Permissions.FileIOPermission, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089' failed.

So... I got to my web.config file and change the trust level, then I get this error:

Configuration Error

Parser Error Message: This configuration section cannot be used at this path. This happens when the site administrator has locked access to this section using <location allowOverride="false"> from an inherited configuration file.

I've been on the phone with godaddy a few times, but their tech support people don't really know what to do. Has anyone ever run into a similar problem or know how I can fix this?

Ocean10000

7:06 pm on Mar 22, 2008 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



Your Host GoDaddy - Has setup the shared server to forbid a number if things that could lead to an application compromising the entire server. I do not think they will allow you to change this at the website level. They have set IIS/Asp.Net to disable the ability at the individual websites level to change the security items. This is a newer feature with IIS 7 and asp.net 2.0 and up website, that hosts can enable.