Best practices with custom error pages (834452)
The information in this article applies to:
- Microsoft Internet Information Services 5.0
- Microsoft Internet Information Services version 5.1
- Microsoft Internet Information Services version 6.0
SUMMARYCustom error pages are designed to display detailed error information that helps administrators and developers to troubleshoot and to solve Active Server Pages (ASP) coding issues.
However, this detailed error information can provide the name of the ASP script that caused the error, a relative path to the script's location, and information about the line in the script that caused the error. This information could be used maliciously.
The following is an example of such an error:
Technical Information (for support personnel)
Error Type:
Microsoft VBScript runtime (0x800A01A8)
Object required: ''
/error.asp, line 20
Browser Type:
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322)
Page:
GET /error.asp
Time:
Wednesday, January 07, 2004, 8:28:37 PM REFERENCES
For additional information about using custom error pages in IIS, click the following article numbers to view the articles in the Microsoft Knowledge Base:
311766
HOW TO: Troubleshoot an "HTTP 500 - Internal Server Error" Error Message
814869 INFO: Custom Error Messages in IIS 6.0
For additional information about creating custom ASP error pages for use in development environments, click the following article number to view the article in the Microsoft Knowledge Base:
Modification Type: | Major | Last Reviewed: | 1/9/2004 |
---|
Keywords: | kbhowto KB834452 |
---|
|