Web Server Security

[velvetskies]

Hi,

I am doing an ASP website that allows users to upload files into the webserver. I am using ASP codes to the upload.

One folder is created (in one folder for all uploaded files, call it "main-folder") for each uploading process. In cases of "rollback" situations, I'll delete the folder created for that process.

I've allowed 'write' and 'delete' permissions on the main-folder for everyone. Will that cause any insecurity of the web server?
Btw, I am using Win2K Server

Thank you.

[DeadEyes]

The first thing that springs to mind is what happens if someone continuely uploads files until your HD is full

[velvetskies]

Hm..
i've restricted each file size to 1MB and they have to go thru an authetication process before they can use that "upload page". Any suggestions to make it better?

[Ideas Man]

I'm curious to this myself, I'd say what you've done is alright, maybe a method of tracking what each user uploads/deletes such as in a log or a database. That way you can see which of your users are maliciously causing damage or doing the wrong thing.