Downloading Template Files from Web Server
Be careful when hosting your web site based on DasBlog from a Windows XP machine. While IIS 6 in Windows 2003 prevents the download of files with unknown extensions by default, IIS 5.1 in Windows XP allows downloading such files. In the case of DasBlog all *.blogtemplate
files are at risk. There are a few sites out there where these files can be downloaded. Although this probably isn't a big security risk it might be something you want to prevent. Probably the easiest way to do that is by modifying the web.config
file. You should add the following line at the end of the <httpHandlers>
section:
<add verb="*" path="*.snippet" type="System.Web.HttpForbiddenHandler" />