【正文】
, Web server permissions Can configure the Web server permissions to restrict users to view all the running and operation of the way ASP pages. Unlike NTFS permissions to control the provision of applicationspecific user access to files and directories the way, Web server permissions apply to all users, and do not distinguish between the type of user account. To run for your ASP applications users, in the setting Web server permissions must be guided by the following principles: Asp file containing the virtual directory to allow read or script permissions。 to include asp files and other executive privileges to run the virtual directory of the document to allow read and executive authority. Fourth, Script mapping file Script mapping applications to ensure that the Web server does not accidentally download the source code asp file. For example, even if your asp file contains a directory set up a read permission, as long as the asp file is part of a script mapping applications, then your Web server the file will not return to the source code to the user . Fifth, Cookie security SessionID cookie to track the use of ASP Application or conversation during the visit to the Web browserspecific information. This means that the cookie with the HTTP request is considered to be from the same Web browser. Web Server Se ssionID cookies can be used to configure userspecific session information with the ASP application.