IIS 5.0-W2K-PHP Intranet File Upload Permissions

I am the PHP coder working with the IT administrator (who has control over the IIS) on developing an intranet site that allows users to upload files through an IE browser to special directories on the webserver. Our IT administrator knows very little about IIS and is looking to me for guidance on permissions.

We don't want the users to be able to edit the files (like say through Windows Explorer), but we want the PHP program to control their access to these files. We also want the PHP program to allow them to upload files via the browser to these special directories.

The directories are on the same harddrive as the web server. That may change in the future, but for now we thought that would be the simplest solution to get the users access.

I have been given read/write/edit permissions to these special directories so I can mess around with them using Windows Explorer. The other users do not have that kind of access, since we hope the php program will control that kind of access.

So when I test my PHP program I can upload via the browser to these special directoris, but other users cannot upload to the special directories. This is bad, bad, bad.

I do not know what to tell our IT guy. We tried different scenarios but I don't know how to communicate to him what to set. Please help me... this is about to give me panic attacks.

Remain calm brother, help is on the way. No one is going to edit your files through internet explorer. If you do not have FTP turned on (you shouldnt if you're going through an intranet, using dns to resolve the site), and you are storing your php files in a virtual directory then you have nothing to worry about. In order for IIS to let php edit files in a directory it needs write permissions. Dont let it have script access though, or view directory. You need to give full permissions on that specific directory to everyone, 777.

Elaborate upon your setup and your needs for the customer, and who the customer is a little better, and I can give you an answer fitting your problem.