Hi,
We have installed PHP on our IIS 7.5 development server using the Web Platform Installer. PHP is running fine but we have run into a problem where sites can create and write to a file anywhere on the file system.
The application pool for the site is running under ApplicationPoolIdentity we haven't made any additional changes to the permissions on the directories.
This occurs whether or not we have the Anonymous Authentication set to IUSR or Application Pool Identity, changing this only changes the owner of the file that is created.
Any assistance would be much apprectiated. :)