NT File/Folder Permissions

The file, scripting, and folder permissions by default may already be set correctly by Microsoft for IIS 4.0 and 5.0 for the /mall and /cgi-bin folder. Specifically, the root of your web site on the server must be marked as an Application Root by the server administrator and the Script permissions and Read must be enabled for the /cgi-bin folder. When you create a new web site in IIS4.0 or IIS5.0, by default this is already the case. Unless your ISP has reduced these permissions or capabilities, the only permissions and settings that must be changed is on the /fpdb folder. Your ISP will have to change the permission on the /fpdb folder and you should do this as well on your local computer if you have SalesCart 2000 running locally.

If all the settings have remained to their default state, your Service Provider or Server administrator will only have to do the following procedures.

Service Provider/Server Administrator

ASP Enable Buffering

By default the ASP Enable Buffering settings are turned on and they must be turned on for SalesCart to function properly. If this option is turned off, some checkout pages will simply stop in a blank state.

Correct NTFS (NT File System Permissions)

To correct the permission settings for the folder /fpdb, your server administrator must do the following:

1. Open the File Manager or Windows Explorer.
2. Go to the Application folder /fpdb
3. Right-click and select Properties>> Security>>Permissions
4. You will see the Directory Permissions Dialog box like this:
   
5. Within the Name: field double-click on IUSR_<server name>
6. From the Type of Access drop-down menu, select Change (RWXD)
   

This will not allow anyone to download your shop.mdb if you continue with the following step.

Correct Virtual Directory permissions for the /fpdb folder. IMPORTANT

1. The virtual directory permissions of the /fpdb folder MUST be as follows. If not, your ISP service provider needs to change them with IIS's Microsoft Management Console or anyone will be able to download your shop.mdb file. This is the file where your customers credit card information is stored. The Read Access permissions for the virtual directory in IIS's Microsoft Management Console must be unchecked.

Warning! It is this Virtual directory and script permissions that truly allow someone to download a file. By Default, virtual application folders only have Write Access or Read Access and not Read and Write. Since the Virtual Directory permissions of /fpdb folder, only has write access, the server will not allow anyone to download or READ the order database /fpdb/shop.mdb from a Web browser. If you can, and you should test this, then the virtual directory permissions need to be changed to Write only in the IIS properties.