Make webshell unable to run

In fact, it is to run IIS to execute permission settings on directory folders to make webshell unable to run.
You attempt to execute CGI, ISAPI, or other executable programs from the directory, but this directory does not allow execution of programs.
Interneter Server Management ---- right-click the site directory in IIS ---- properties ---- in the main directory
Generally, the "execution permission" is set to "Pure script", and the script file can run normally. If it is set to "NONE", it cannot run.
 
Set "execution permission" to "NONE" for some image directories on www.2cto.com. Even if webshell can be uploaded to this directory, it cannot run!
Now many space vendors can set such "execution Permissions", but it seems that they can only set the root directory, but it is quite good!
This can effectively prevent others from getting webshells, but it is not absolute!
Sometimes it can be constructed and uploaded to another directory or to the upper-level directory!