
	Where results make sense

Topic: ISAPI

In the News (Mon 4 Jun 12)

EXECUTIVE POWER

Iran

ANALYSIS

Pakistan

Family compact

	mod_isapi - Apache HTTP Server
		ISAPI extension modules (.dll files) are written by third parties.
		Whether or not you have preloaded an ISAPI extension, all ISAPI extensions are governed by the same permissions and restrictions as CGI scripts.
		Many ISAPI modules are subtly incompatible with the Apache server, and unloading these modules helps to ensure the stability of the server.
	httpd.apache.org /docs/2.0/mod/mod_isapi.html (862 words)

	ISAPI Extension Overview
		ISAPI extensions are true applications that run on IIS and have access to all of the functionality provided by IIS.
		ISAPI extensions are implemented as DLLs that are loaded into a process that is controlled by IIS.
		The ISAPI extension carries out the actions it was designed to perform: for example, reading more data from the client (as in a POST operation), or writing headers and data back to the client.
	msdn.microsoft.com /en-us/library/ms525172.aspx (1001 words)

	ISAPI Rewrite - URL Rewriting for Windows Server IIS
		ISAPI Rewrite is a powerful URL manipulation engine based on regular expressions.
		ISAPI Rewrite is an ISAPI filter written in pure C/C++ so it is extremely fast.
		ISAPI has a small stand alone Regular Expression Test Utility GUI app for developers to test/debug expressions before use.
	www.seoconsultants.com /windows/isapi (422 words)

	ISAPI
		ISAPI (procounced eye-sap-ee) was developed by Process Software Corporation (the developer of Purveyor Encrypt Web Server available under VMS), Microsoft Corporation and a small number of other vendors.
		Unlike classic ISAPI the DLLs are not loaded into server space but into separate subprocesses, in much the same way as CGIplus scripts are handled (see 3 - CGIplus).
		For this reason ISAPI extensions (scripts) should finalize the processing of transactions when finished, not leave anything in a state where it's unexpected demise might corrupt resources or otherwise cause problems (which is fairly good general advice anyway ;^) That is, when finished tidy up as much as is necessary.
	cc.usu.edu /doc/scripting/scripting_0600.html (937 words)

	Articles - Introduction To ISAPI / Support // ISAPILabs
		Although ISAPIs are mostly known for their use with Microsoft Internet Information Services (usually called IIS or MS-IIS), they may also be used with many other web servers, including Apache (Note: Apache supports only ISAPI extensions), Zeus, and many more.
		An ISAPI plugin (sets of them are referred to ISAPIs) is a program that loads into the memory when the web server is started and unloads when the web server is shut down.
		For example, ISAPI extensions can be used to create databases to store customer information, such as billing addresses, credit card information, shipping addresses, etc. Storing such information saves customers from the inconvenience of re-entering this information each time they make a purchase.
	www.isapilabs.com /support/articles/introductiontoisapi.htm (678 words)

	A low-level Look at the ASP.NET Architecture (Site not responding. Last check: )
		ISAPI is a low level Win32 style API that had a very meager interface and was very difficult to work for sophisticated applications.
		ISAPI is an excellent tool to provide the high performance plumbing interface to higher level applications, which can then abstract the information that ISAPI provides.
		ISAPI filters are hook interfaces that allow the ability to look at EVERY request that comes into IIS and to modify the content or change the behavior of functionalities like Authentication.
	www.west-wind.com /presentations/howaspnetworks/howaspnetworks.asp (7743 words)

	Blind Buffer Overflows In ISAPI Extensions
		This is important because a number of organizations rely on the fact that their ISAPI extensions are not only closed source, but also not available to the public.
		A number of different ISAPI extensions were created, each with a different type of stack-based overflow vulnerability to act as demonstrative proprietary applications as seen in the wild.
		The reasons for choosing an ISAPI extension were two fold, the first being that custom web based applications which utilize ISAPI extensions and filters are becoming more and more popular, as well as old extensions still being used today are rarely reviewed for security flaws.
	www.securityfocus.com /infocus/1819 (3475 words)

	ISAPI - Wikipedia, the free encyclopedia
		The Internet Server Application Programming Interface (ISAPI) is the API of Internet Information Services (IIS), Microsoft's collection of Windows-based web server services.
		The most prominent application of IIS and ISAPI is Microsoft's web server (like the more recent OS -- Windows Server 2003 which manages all server operations with efficiency).
		The ISAPI has also been implemented by Apache's
	en.wikipedia.org /wiki/ISAPI (105 words)

	EGGCentric - ISAPI Tools (Site not responding. Last check: )
		If you develop and deploy isapi dll's the major problem you will run into is the fact that you cannot simply overwrite your old isapi dll with a new one, this is because once your dll has been loaded by your web server — it will be “locked” preventing you from overwriting it.
		The purpose of the ISAPI Loader is to allow you to update your isapi dll without shutting down your WebServer, and if your user sessions are not volatile then the only interruption users will see are your changes.
		The ISAPI Loader is a “stub” for your ISAPI application and has control over loading and unloading of your dll.
	www.eggcentric.com /ISAPILoader.htm (445 words)

	ISAPI Extensions and Filters
		ISAPI filters can be used with Internet Information Server to add features such as monitoring HTTP transactions or authentication.
		The filter's funcionality remains exactly the same, the purpose of the article is to demonstrate the use of the MFC ISAPI classes to write filters.
		An ISAPI filter is one way to change the default behavior of IIS and affect how the HTTP requests are handled.
	www.iisfaq.com /?View=P11 (2056 words)

	ISAPI Filters
		The ISAPI applications are intended to do drive a WEB site or act as engine for which the actual server side code is written (e.g.
		The ISAPI filters on the other hand are plug-ins that interact with the work the WEB server does and perform additional actions, alter certain data or replace some of the server's functionality.
		There are many ISAPI filters on the WEB and many of them (including some of our filters) implement some tricks that are of indirect help for the webmasters or for the WEB developers.
	www.newobjects.com /productlist.asp?Category=WEBRetail (577 words)

	Grafman Productions - ISAPI
		But since this only impacts servers, and ISAPI plugins are so easy to create, this is not a substantial road block to their use.
		ISAPI is supported by Microsoft's IIS server, NetManage's Personal Web Server, O'Reilly's WebSite, and a number of other popular NT Web servers.
		The ISAPI plugin then processes the server request in much the same way a CGI handler would, with the exception that GetServerVariable is used to retrieve CGI variables, ReadClient and WriteClient are used instead of stdio, and ServerSupportFunction can be used to access certain Web server support functions.
	www.graphcomp.com /grafman/isapi/tips.html (359 words)

	Writing an ISAPI Filter
		An ISAPI filter is a replaceable dynamic-link library (DLL) the server calls on every HTTP (Hypertext Transfer Protocol) request.
		ISAPI filters can be used to enhance the Microsoft Internet Information Server with custom features such as enhanced logging of HTTP requests, custom encryption, and compression schemes, or new authentication methods.
		ISAPI filter applications should register only for the events that are required.
	www.graphcomp.com /info/specs/ms/httpfilt.htm (2234 words)

	Page 2 - An Introduction To ISAPI
		As the title of this article suggests, ISAPI is generally a forgotten technology (although it is making a surge back to popularity with the new XML/SOAP technologies that rely on ISAPI- see "The Future of ISAPI" section).
		ISAPI was developed to fulfill the deficiencies where CGI fails.
		ISAPI will allow the application to access the Windows list of functions, kill processes being run by the server, view a screenshot of the hosting screen, and perform countless other administration options, all while providing a secure and robust platform to do so.
	www.devarticles.com /c/a/IIS/An-Introduction-To-ISAPI/1 (1402 words)

	ISAPI Filter Component - Easier than MFC!
		ISAPI Filters and Extensions are used to extend the Microsoft Internet Information Server (IIS) through the ISAPI programming API.
		An ISAPI Extension can be used to handle a web request in a custom way, however, unlike an extension, an ISAPI Filter can be used to intercept all or some HTTP request at different levels based on need and change the outcome of the whole process in very efficient ways.
		ISAPI is a low level API usually mastered by C or C++ (Commonly MFC).
	www.bestcode.com /html/isapi_filter.html (668 words)

	ISAPI Source and Binaries
		This isapi extension has been written to demonstrate multithreading of isapi extensions.
		This is a template for ISAPI extensions for C++.
		This isapi dll will accept both get and post submission methods, and reply all information entered by the user from the client side.
	www.genusa.com /isapi/isapisrc.html (755 words)

	ISAPI Filter Plugins - ISAPILabs
		Although ISAPIs are mostly known for their use with Microsoft Internet Information Services (usually called IIS or MS-IIS), they may also be used with many other web servers, including Apache (Note: Apache supports only ISAPI extensions), Zeus, and many more.
		For example, ISAPI extensions can be used to create databases to store customer information, such as billing addresses, credit card information, shipping addresses, etc. Storing such information saves customers from the inconvenience of re-entering this information each time they make a purchase.
		If you are interested finding out more about ISAPI plugins, give us a call at 866-722-5797 or email us right away to discuss how we can help you.
	www.thewebmark.com /isapi.htm (373 words)

	PerlIS - Perl for ISAPI
		Information on Perl for ISAPI can also be found in the ActivePerl-Winfaq6 manpage and the ActivePerl-Winfaq7 manpage.
		Perl for ISAPI is distributed as a part of the ActivePerl distribution.
		The source for Perl for ISAPI is not distributed to the public.
	www.xav.com /perl/faq/Windows/ActivePerl-Winfaq2.html (523 words)

	Installing the WebLogic ISAPI plug-in
		WebLogic ISAPI is distributed as the dynamic-link library "iisproxy.dll" for NT.
		The ISAPI module can only proxy files that correspond to the types registered for proxying in the Internet Service Manager.
		When a member cannot be reached it is marked as "bad" (but is not forgotten), and another member is tried instead; after 10 skips, the member is tried again, and if successful, its status is changed.
	www.weblogic.com /docs51/admindocs/isapi.html (2484 words)

	ISAPI Links and Tools (Site not responding. Last check: )
		ISAPI Manager is an ISAPI DLL, that enables you to manage your own ISAPI library remotely.
		ISAPI manager is loaded before your ISAPI DLL and such allows loading and unloading of your DLL over the web.
		ISAPI Manager is freeware but you may not delete or modify the copyright (english).
	www.dataweb.de /en/support/isapi.html (752 words)

	15 Seconds : Book : Inside ISAPI
		Inside ISAPI from New Riders is not only a book about programming the ISAPI Interface, but a book about solutions.
		If you have any ISAPI programming to do this book is a most read, maybe the programming you need to do is included already as one of the solutions presented.
		Included are considerations for moving your ISAPI application from IIS 3.0 to IIS 4.0, performance considerations and the effects of isolated ISAPI applications on ODBC connection pooling.
	www.15seconds.com /book/1562056506.htm (333 words)

	Debugging ISAPI DLLs with CgiWrap, Summer 1996 (Site not responding. Last check: )
		(In ISAPI, the standard input and output handles are replaced by handles to connections, but the concept is still the same.) To use CgiWrap without the server, you will need to set up the environment your DLL is going to operate in.
		It calls the ISAPI function GetExtensionVersion to do a version check and see if your DLL and server are compatible, then calls the CgiWrap FillExtensionControlBlock function.
		CgiWrap is a useful tool for testing your ISAPI DLL in the initial stages of development.
	www.microsoft.com /mind/0596/CgiWrap/CgiWrap.asp (1852 words)

	Creating a Thread Pool for MFC-Based ISAPI Extensions
		Often when an ISAPI extension requires a significant amount of processing time to complete a request, it is necessary to create a separate thread of control to handle the processing.
		For this reason, it's advantageous to create a pool of worker threads from which a thread can be "recycled." The affect of this is that the cost of creating a new thread is removed from the cost of handling a new request.
		The ISAPI extension will incur the cost of creating the threads when it first initializes but for each request it will merely request an available worker thread from the pool.
	support.microsoft.com /support/kb/articles/Q197/7/28.asp (2335 words)

	Amazon.com: Using Isapi (Using ... (Que)): Books: Stephen Genusa,Bobby, Jr. Addison,Allen Clark,Dean Cleaver,Kevin ... (Site not responding. Last check: )
		ISAPI's big promise was better performance and memory usage...ironic that it has now fallen in favor to the biggest performance pig of all web applications...ASP.
		ISAPI is hard to learn, harder to get right, unstable, bug ridden (if written in MFC) and surprisingly inflexible.
		ISAPI is Microsoft's approach to adding capabilities to web serving.
	www.amazon.com /exec/obidos/tg/detail/-/0789709139?v=glance (1343 words)

	Two Mistakes That Compromise ISAPI Application Security (Site not responding. Last check: )
		ISAPI code is usually C/C++ code, which Web servers use to run high-performance portions of Web sites.
		Most ISAPI calls are written in C/C++, which means they are just one notch above the metal and have direct access to memory and pointers.
		The Internet Printing Protocol (IPP) buffer overrun, explained in "Unchecked Buffer in ISAPI Extension Could Enable Compromise of IIS 5.0 Server" from Microsoft TechNet, was a very simple bug that I have seen on a number of occasions.
	archive.devx.com /security/bestdefense/2001/mh1001/mh1001-1.asp (577 words)

	David Wang : MFC ISAPI Template and ISAPI Development
		I've read on msdn that for Visual Studio 2005 the MFC ISAPI extension template was discontinued and that for new development "ISAPI entry point functions" should be used instead.
		I'm interpreting that as the MFC isapi classes are problematic.
		In other words, the MFC ISAPI Template is not a deciding factior between Visual C++ 2005 Express or Standard.
	blogs.msdn.com /david.wang/archive/2006/03/25/MFC_ISAPI_Template_and_ISAPI_Development.aspx (1282 words)

	ISAPI code - PowerBASIC Forums
		It is based on a re-write of PowerBasic's isapi include file and borrows some funtions from pbcgi.inc. The DLL itself (i think) is based on works by Dave Navarro.
		This can lead to very bad things happening as ISAPI dlls are multi-threaded and the values of the members of this structure (specifically ConnID) can be different with each call.
		I have simplified and renamed most of the isapi functions and pass ECB as a parameter.
	www.powerbasic.com /support/forums/Forum7/HTML/000814.html (1494 words)

	ISAPI Authenticator light (Site not responding. Last check: )
		ISAPI custom authentication filter for Microsoft Internet Information Server 4 or later.
		ISAPI filter for Microsoft Information Server 4.0 or later.
		It is simple to install filter and administrative tools - ISAPI filter must be placed somewhere and registered as filter in IIS.
	www.newobjects.com /product.asp?Category=2&Story=30& (1610 words)

	The Code Project - Free Source Code and Tutorials
		Discusses ISAPI extensions in detail and shows how to implement an extension to validate a given credit card#.
		ISAPI filter to allow access only to hosts with selected names
		This article describes an ISAPI project to send a page containing two frames to the browser.
	www.codeproject.com /isapi (473 words)

	David Wang : HOWTO: Use ISAPI GetServerVariable (Site not responding. Last check: )
		GetServerVariable is one of the most frequently used function call of ISAPI Extension and ISAPI Filter APIs, but unfortunately, it is also one of the most incorrectly used.
		It is perfectly possible to write an ISAPI that works on all IIS versions yet still leverage the benefits of each.
		Meanwhile, ISAPI GetServerVariable directly reads from the full set of IIS Server Variables, which has nothing to do with the process environment which is manipulated via a different API.
	blogs.msdn.com /david.wang/archive/2005/08/18/ISAPI_GetServerVariable.aspx (2012 words)

Try your search on: Qwika (all wikis)