Secure your file upload pages!

For anyone that has been writing in ASP for a period of time. You will eventually want to make a file upload option for your users or clients. It can easily be over looked while developing to not secure your file upload pages.

However no matter if you use an upload component (free or paid) such as:
ASPUpload
SA-FileUp
ABCUpload

Or create your own such as Pure ASP Upload, or using windows scripting.

Always make sure it is behind pages that check for authentication first (login page) - and make sure the upload page has authentication verification.. Recently a friend of mine tweaked his upload page, removing authentication checking during his debug process and forgot to put it back on. Someone half a world away found it (probably through vulnerability scanners) and uploaded his own script that allowed him to view the entire drives contents and download or upload what he wished.

There are a couple of good FAQ's here about creating login pages and checking for authentication.

http://www.tek-tips.com/faqs.cfm?fid=1030

http://www.tek-tips.com/faqs.cfm?fid=3630

Double check - err on the side of caution.