Click to See Complete Forum and Search --> : IE security issue


adi
04-02-2004, 12:18 PM
Hi! I have this problem with a security program im writting (in VB). The program should prevent access to local folders and files on a PC that serves as an Internet access point in a library.The problem appears when somebody types a local adress in the adress bar (E.g: "file://c:\" , "Desktop") .
I found something here http://support.microsoft.com/defaul...kb;en-us;179221



Modifying the registry key (HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ Explorer) as indicated by MS prevents access to all files and folders but when typing "Desktop" it still grants access.
What should i do?
Thanks!

Moonglobe
04-02-2004, 12:19 PM
not use windows?

adi
04-02-2004, 12:22 PM
What?

DigitalExpl0it
04-02-2004, 01:29 PM
The Requested Web Page is Not Available

Moonglobe
04-02-2004, 07:01 PM
you asked "what should i do?" so i gave my honest advice...

adi
04-03-2004, 02:00 AM
@Moonglobe
Unfortunaly i dont get to choose.Its somebody elses bad choice.

dalecosp
04-03-2004, 06:03 PM
Hmm, symlink "Desktop" to the Recycle Bin?

j/k...

Hmm, in more "advanced" (NT/2000/XP) versions of MS Win, there may be "local policy" settings that you could change to bar users from sections of the file system. As FAT and FAT32 have no concept of permissions, I'd have no idea what to do with win9x....

Now, were this PHP we were talking about, I'd just:if (stristr("Desktop", $_REQUEST['URI'])) {
die("You're not allowed to see the Desktop...");
}I don't know if you can do something like that in your app or not....

Do you suppose there's some Windows or Security or Visual Basic programming forum where you might find knowledgeable folk?

Good luck...