Karatas, FERHAT
I would love to change the world, but they won't give me the source code!
Classic ASP Error Messages in IIS 7.5
22.6.2009 13:39:56 - Filed under : Asp.net
In earlier versions of IIS, error messages from classic ASP scripts were sent to a Web browser, by default. Because these error messages might reveal sensitive information to malicious users, IIS 7.0 disables this feature by default. When your classic ASP scripts encounter an error in IIS 7.0, you receive the following error message by default:

An error occurred on the server when processing the URL. Please contact the system administrator.
  If you are the system administrator please click here to find out more about this error. 
You can customize the ASP script error message, and also determine whether to return the script errors to a Web browser. Note: As a best practice for security, you should only enable sending ASP script error messages to a Web browser on a development or test computer; returning script error messages to a Web browser can unintentionally expose more information than you intended to show. Customizing Classic ASP Error Messages
The configuration settings that you use to customize these settings are in the following list:

This is an optional string attribute that specifies the error message that will be sent to the browser when specific debugging errors are not sent to the client.
This is an optional Boolean attribute that specifies whether the writing of debugging specifics to the client browser is enabled
You can configure these settings by using IIS Manager. To do so, open IIS Manager and navigate to the site or application where you want to enable or disable script messages, and then double-click the ASPfeature.

In the list of ASP features, configure the Script Error Message and Send Errors To Browser options.

Keywords : Classic ASP script error messages are no longer shown in a Web browser by default.
with 0 comments

What do you think ?
Security Code 6186
Check S. Code
Home Page