PHP + MySQL + IIS security platform in Windows: Set permissions (1)

Bkjia.com exclusive Article] Hello everyone, I'm cnbird from Cert 365www.antian365.com. We will continue to discuss in detail Windows security and the overall security of php + iis + mysql today. The purpose of this article is to achieve professional-level personal or Enterprise Server-level security such as hichina and xinnet. There are a lot of tips and I hope you can absorb them. For environment setup, refer to the first part of this article. Without much talk, we started to get into the abnormal windows security configuration that we have seen as a headache for hackers today.

1. Brief Introduction to NTFS permissions

1. Introduction to NTFS

There is a reason why I use NTFS as the first part, mainly because the file or directory permissions of Windows use NTFS to implement access rules.

NTFS (New Technology File System) is a File System in the Windows NT operating environment and Windows NT Advanced Server network operating System environment. The goal of NTFS is to provide: reliability, which is achieved through fault tolerance features of recoverable capabilities (event tracking) and hot positioning; a platform for adding functionality; Support for POSIX requirements; eliminate restrictions in the FAT and HPFS file systems.

NTFS provides long file names, data protection, and recovery, and security through directories and file licenses. NTFS supports large hard disks and storage of files on multiple hard disks (called cross-partition ). For example, a large company's database may have to go across different hard disks. NTFS provides built-in security features that control the file affiliation and access. Files in NTFS partitions cannot be directly accessed from DOS or other operating systems. If you want to read and write NTFS partition files in DOS, you can use third-party software; now, Linux systems can use NTFS-3G for the perfect read and write NTFS partition, do not have to worry about data loss. This is part of the Windows NT security system, but it is only used when NTFS is used.

2. Use Convert to Convert Fat32 to NTFS.

If your server uses FAT32, I strongly recommend that you change it to NTFS. If you have installed the system on a drive C with FAT32, all users on this server have the modification permission by default, to put it bluntly, anyone can delete or modify important files on drive C. We certainly don't want to see this situation. Therefore, we need to change fat32 to the NTFS disk format.

The command used here is convert1. Here is its basic syntax, which is easy to understand. Here we change the Fat32 partition of drive C to NTFS. 2. Input Y to start automatic conversion.

Figure 1 use convert to convert Disk Partitions

It is recommended that NTFS be used for quick formatting instead of FAT32 during installation of windows 2003. Avoid troubles.

Figure 2 use the convert command to convert the Fat32 partition to the NTFS format