To prevent our website being compromised due to potential issues with the Site Map Generator PHP script, we have enabled Windows authentication on the folder and turned off anonymous authentication.
/wwwroot/ Anonymous Permitted
/wwwroot/generator/ Windows Authentication Only
The /wwwroot/sitemap.xml file is visible and works fine. However, after running the /generator/index.php to generate the file, the permissions are passed along to the /wwwroot/sitemap.xml and now it asks for a password when we try to ask for it.
How can we modify this so the sitemap.xml does not use the same Windows authentication permissions as the /generator/ folder on IIS7?