Learn how to increase IIS’ maximum URL length value to resolve the IIS and ASP.NET error message “The length of the URL for this request exceeds the configured maxUrlLength value”. The Windows Server IIS maximum URL length is defined by the HttpRuntimeSection.MaxUrlLength property. Its value is 260 characters. This may cause problems with longer than configured maxUrlLength URL’s.
Tag: IIS
Internet Information Services, the HTTP web service on Windows Server
Multiple IIS 6.0/7.5 Vulnerabilities
Multiple vulnerabilities found in IIS 6.0 and 7.5 web servers. On the Full-Disclosure mailinglist Kingcope posted several IIS 6.0 and 7.5 bugs. Because I am a Windows Server and IIS admin, I took some time to test the various vulnerabilities …

How to filter web traffic with blocklists
I needed a HTTP blocklist. Block and filter unwanted web HTTP traffic with blocklists, on both IIS and Apache webservers. Protect your website easily with this PHP blocklist class. Let’s create our own little HTTP filter.
How to use .htaccess files on Windows Server IIS
In this post I’ll show you how to install Helicon Ape in Windows Server IIS and how to use .htaccess files for your website. Further this post describes some common uses of .htaccess files by PHP applications like WordPress, Joomla, Drupal or your own coded CMS, for example how to manage subdomains or redirect HTTP to HTTPS.
Failed Request Tracing error LOG FILE MAX SIZE TRUNCATE
Failed Request Tracing error LOG FILE MAX SIZE TRUNCATE. The maximum size of an FREB log file, in IIS 7+, is 512 KB per default. Once that size is reached, the log file is cut off (truncated) and a message LOG_FILE_MAX_SIZE_TRUNCATE is logged.

PHP on IIS: No input file specified.
Here is how to resolve the no input file specified error with PHP and IIS. When you host your PHP website on Windows Server IIS, you may receive an “No input file specified” error message, when a HTTP request is made to non-existing .php files. When this happens you probably have no Request Restrictions configured in IIS’ PHP handler set
“Forensic Log Parsing with Microsoft’s LogParser”
Just stumbled upon: Forensic Log Parsing with Microsoft’s LogParser. Log parser is a powerful, versatile tool that provides universal query access to text-based data such as log files, XML files and CSV files, as well as key data sources on the Windows® operating system such as the Event Log, the Registry, the file system, and Active Directory®.

7 Snippets to use .htaccess as a Web Application Firewall
Here are 7 .htaccess snippets for you to secure your website, by using .htaccess as a kWeb Application Firewall (WAF). You can use this information to block exploits and rogue HTTP requests on your website.