PHP + IIS Application Pool Identity Windows\Temp permissions
- by Matt Boothman
I am currently running PHP (5.3) on IIS 7.5 on a Win2k8 R2 Web Edition Server and would like to know what, if any, problems or security vulnerabilities I may introduct into a system by assigning Read, Write, Modify & Execute permissions to either IUSR account or the IIS_USERS group for %SystemRoot%\Temp?
Should I be altering permissions to that folder at all (as Windows reminds me I probably shouldn't when i attempt to change them)?
Should I create a temp folder somewhere else and set permissions accordingly?
The problem is when i set Anonymous Authentication (I'm guessing is a more secure option???) to use the App Pool identity, when starting sessions PHP gets stuck in a loop because it's unable to create session files in the %SystemRoot%\Temp folder due to lack of permission on the application pool user or IIS_USERS group.
Another problem being ImageMagick (PHP Extension) is being denied access to %SystemRoot%\Temp to write temporary files so is throwing exceptions.
I have tried searching Google however have not found anything that touches upon this subject specifically.
Any help greatly appreciated.
