<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>Question Re: What are typical values for SQL Remote's invalid_extensions option? in Technology Q&amp;A</title>
    <link>https://community.sap.com/t5/technology-q-a/what-are-typical-values-for-sql-remote-s-invalid-extensions-option/qaa-p/13849413#M4880256</link>
    <description>&lt;P&gt;Preface: We're running the &lt;STRONG&gt;FILE transport&lt;/STRONG&gt; with our own &lt;STRONG&gt;HTTPS transfer&lt;/STRONG&gt; facility (based on WinInet). The "server share" is made available to the clients via an &lt;STRONG&gt;IIS 6 web server&lt;/STRONG&gt;. The following list was collected by means of a "brute force" attempt to upload files with all possible extensions.&lt;/P&gt;
&lt;P&gt;I'm quite sure that some of these extensions are only problematic for our particular setup as they typically denote script files, others seem to be used by IIS for different reasons (which I don't claim to understand). - When using classical FTP servers, I guess the list would contain different entries. YMMV...&lt;/P&gt;
&lt;P&gt;I just found out that ".url" is a bad extension for IIS, too - it seems to get blocked immediately by the web server - so now it's on the blacklist:&lt;/P&gt;
&lt;DIV class="codehilite"&gt;&lt;PRE&gt;&lt;SPAN class="k"&gt;set&lt;/SPAN&gt; &lt;SPAN class="n"&gt;remote&lt;/SPAN&gt; &lt;SPAN class="n"&gt;file&lt;/SPAN&gt; &lt;SPAN class="k"&gt;option&lt;/SPAN&gt; &lt;SPAN class="k"&gt;public&lt;/SPAN&gt;&lt;SPAN class="p"&gt;.&lt;/SPAN&gt;&lt;SPAN class="n"&gt;invalid_extensions&lt;/SPAN&gt; &lt;SPAN class="o"&gt;=&lt;/SPAN&gt;
&lt;SPAN class="s1"&gt;'asa,asp,bat,cdx,cer,cgi,cmd,com,crl,crt,cs,dll,exe,idc,isa,js,p12,pfx,pif,stl,url,vbs'&lt;/SPAN&gt;&lt;SPAN class="p"&gt;;&lt;/SPAN&gt;
&lt;/PRE&gt;&lt;/DIV&gt;</description>
    <pubDate>Thu, 06 Oct 2011 12:28:04 GMT</pubDate>
    <dc:creator>VolkerBarth</dc:creator>
    <dc:date>2011-10-06T12:28:04Z</dc:date>
    <item>
      <title>What are typical values for SQL Remote's invalid_extensions option?</title>
      <link>https://community.sap.com/t5/technology-q-a/what-are-typical-values-for-sql-remote-s-invalid-extensions-option/qaq-p/13849412</link>
      <description>&lt;P&gt;Of course, that will depend on the file transport in use...&lt;/P&gt;
&lt;P&gt;I'm gonna share my current collection &lt;A href="http://dcx.sybase.com/index.html#1201/en/sqlremote/sr-file.html" target="_blank"&gt;for that option&lt;/A&gt; as an answer - feel free to contribute:)&lt;/P&gt;</description>
      <pubDate>Thu, 06 Oct 2011 12:17:17 GMT</pubDate>
      <guid>https://community.sap.com/t5/technology-q-a/what-are-typical-values-for-sql-remote-s-invalid-extensions-option/qaq-p/13849412</guid>
      <dc:creator>VolkerBarth</dc:creator>
      <dc:date>2011-10-06T12:17:17Z</dc:date>
    </item>
    <item>
      <title>Re: What are typical values for SQL Remote's invalid_extensions option?</title>
      <link>https://community.sap.com/t5/technology-q-a/what-are-typical-values-for-sql-remote-s-invalid-extensions-option/qaa-p/13849413#M4880256</link>
      <description>&lt;P&gt;Preface: We're running the &lt;STRONG&gt;FILE transport&lt;/STRONG&gt; with our own &lt;STRONG&gt;HTTPS transfer&lt;/STRONG&gt; facility (based on WinInet). The "server share" is made available to the clients via an &lt;STRONG&gt;IIS 6 web server&lt;/STRONG&gt;. The following list was collected by means of a "brute force" attempt to upload files with all possible extensions.&lt;/P&gt;
&lt;P&gt;I'm quite sure that some of these extensions are only problematic for our particular setup as they typically denote script files, others seem to be used by IIS for different reasons (which I don't claim to understand). - When using classical FTP servers, I guess the list would contain different entries. YMMV...&lt;/P&gt;
&lt;P&gt;I just found out that ".url" is a bad extension for IIS, too - it seems to get blocked immediately by the web server - so now it's on the blacklist:&lt;/P&gt;
&lt;DIV class="codehilite"&gt;&lt;PRE&gt;&lt;SPAN class="k"&gt;set&lt;/SPAN&gt; &lt;SPAN class="n"&gt;remote&lt;/SPAN&gt; &lt;SPAN class="n"&gt;file&lt;/SPAN&gt; &lt;SPAN class="k"&gt;option&lt;/SPAN&gt; &lt;SPAN class="k"&gt;public&lt;/SPAN&gt;&lt;SPAN class="p"&gt;.&lt;/SPAN&gt;&lt;SPAN class="n"&gt;invalid_extensions&lt;/SPAN&gt; &lt;SPAN class="o"&gt;=&lt;/SPAN&gt;
&lt;SPAN class="s1"&gt;'asa,asp,bat,cdx,cer,cgi,cmd,com,crl,crt,cs,dll,exe,idc,isa,js,p12,pfx,pif,stl,url,vbs'&lt;/SPAN&gt;&lt;SPAN class="p"&gt;;&lt;/SPAN&gt;
&lt;/PRE&gt;&lt;/DIV&gt;</description>
      <pubDate>Thu, 06 Oct 2011 12:28:04 GMT</pubDate>
      <guid>https://community.sap.com/t5/technology-q-a/what-are-typical-values-for-sql-remote-s-invalid-extensions-option/qaa-p/13849413#M4880256</guid>
      <dc:creator>VolkerBarth</dc:creator>
      <dc:date>2011-10-06T12:28:04Z</dc:date>
    </item>
  </channel>
</rss>

