Hi! I have 2 questions: 1- I have a PHP aplication that have been blocked by URL Scan. My rule was set to .asp and .aspx , but URL Scan is still aplying the rule for my PHP aplication ( its a < that goes in the URL, so the log file report the %%3C ). I would like to know how do I configure URL Scan...

I'm trying to combat a wave of SQL injection attacks on an IIS 6.0 server. I've installed UrlScan and setup a [SQL Injection] rule. I'm not receiving any rejections so I probably have something configured incorrectly. UrlScan is shown as a valid ISAPI filter within the IIS administrator for...

What this allowdotinpath ?