SoftArtisans FileUpEE Guide

Note for ISPs

Licensing and Sharing SoftArtisans FileUpEE

SoftArtisans FileUpEE is licensed on a per-CPU basis. There are no per-server, per-user, per-processor, or per-concurrent upload license costs. If the ISP is hosting multiple sites or clients on a single server, every site or client on that server can create an instance of FileUpEE and perform uploads.

If a single customer purchases FileUpEE and the ISP installs it on their server, FileUpEE will automatically be available to all customers on that server. You can limit usage of the FileUpEE components (FileUpEE.dll, MimeClient.dll, and FileUpEEProgress.dll) to a single customer. You cannot limit the use of FileUpEE's ISAPI filter to a single customer. The filter will be available to all Web sites hosted on the server where the filter is installed, however, the filter will only intercept requests for files with the extensions .upl and .uplx.

An ISP customer cannot install FileUpEE without the assistance of the ISP. Even if your customer transfers the DLL files to your server, administrator access is required to register the DLLs in the system registry.

When a customer is interested in FileUpEE, some ISPs elect to purchase the tool because:

The ISP is directly supported by SoftArtisans rather than passing through the intermediary of their customer.
The upload and secure download features of FileUpEE are additional features that can be offered by the ISP to prospective customers.

Disallowing Sharing of SoftArtisans FileUpEE

By default, FileUpEE will be available to all customers hosted on your Web site. To restrict usage of FileUpEE to particular virtual servers or sites:

Create a specific NT account with "log on locally" rights.
Within the IIS Microsoft Management Console, set the Anonymous user for the chosen site to be the newly created account.
Ensure that the NTFS permissions on FileUpEE.DLL allow access by the newly created account only, and not IUSR_MachineName. This will prevent other users from creating an instance of FileUpEE.

You cannot limit the use of FileUpEE's ISAPI filter to a single customer. The filter will be available to all Web sites hosted on the server where the filter is installed. However, the filter will only intercept requests for files with the extensions .upl and .uplx.

Auditing Your Web Sites

For maximum security, it would be prudent to occasionally audit your customer's code. In particular, you should verify:

That the destinations of the uploads are in appropriate directories.
That an instance of FileUpEE is not created as an application variable. Creating an instance of FileUpEE as an application variable is a security risk.