Tuesday, 16 June 2015

Disable the Upload watcher sitecore

Upload watcher automatically creates items in the Media section for files in /Website/upload folder, which may present a security risk if this functionality is not used.

Disabling Upload watcher  ensures that you can only upload files from within the Sitecore client and have control over the files that are uploaded  

When Upload Watcher is disabled, files that are placed in the /upload folder are not automatically
uploaded to the Media Library



IIS7
 <system.webServer>
 <modules>
 <remove name="ScriptModule"/>
 <add type="Sitecore.Nexus.Web.HttpModule,Sitecore.Nexus" name="SitecoreHttpModule"/>
 <add type="Sitecore.Resources.Media.UploadWatcher, Sitecore.Kernel"
name="SitecoreUploadWatcher"/>


IIS6
 <httpModules>
 <add type="Sitecore.Nexus.Web.HttpModule,Sitecore.Nexus" name="SitecoreHttpModule"/>
 <add type="Sitecore.Resources.Media.UploadWatcher, Sitecore.Kernel"
name="SitecoreUploadWatcher"/>



More detials

https://sdn.sitecore.net/upload/sitecore6/62/sitecore_security_hardening_guide-usletter.pdf




1 comment:

  1. wonderful information, I had come to know about your blog from my friend nandu , hyderabad,i have read atleast 7 posts of yours by now, and let me tell you, your website gives the best and the most interesting information. This is just the kind of information that i had been looking for, i'm already your rss reader now and i would regularly watch out for the new posts, once again hats off to you! Thanks a ton once again,
    Regards, sitecore training in hyderabad

    ReplyDelete

Featured post

Getting Started With SOLR

Getting Started with Solr ·           Features o    Hit highlighting o    Auto correction o    Faceted Search o    Multi lan...