Skip to content
  • Categories
  • Recent
  • Tags
  • Popular
  • World
  • Users
  • Groups
Skins
  • Light
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (No Skin)
  • No Skin
Collapse
Code Project
  1. Home
  2. Web Development
  3. ASP.NET
  4. forms authentication problem

forms authentication problem

Scheduled Pinned Locked Moved ASP.NET
helpsecurityquestion
5 Posts 3 Posters 0 Views 1 Watching
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • G Offline
    G Offline
    godzooky
    wrote on last edited by
    #1

    i'm having a problem securing some of my pages using forms authentication. i define the private pages in web.config, but i can get to those pages without logging in. here is my web.config... is there an error??

    A 1 Reply Last reply
    0
    • G godzooky

      i'm having a problem securing some of my pages using forms authentication. i define the private pages in web.config, but i can get to those pages without logging in. here is my web.config... is there an error??

      A Offline
      A Offline
      Albert Pascual
      wrote on last edited by
      #2

      I thought you can only do private pages for .aspx pages not for htm pages?

      G D 2 Replies Last reply
      0
      • A Albert Pascual

        I thought you can only do private pages for .aspx pages not for htm pages?

        G Offline
        G Offline
        godzooky
        wrote on last edited by
        #3

        you are correct. thank you. i changed the file name to .aspx and it worked. however, is it in any way possible to secure non aspx files with forms authentication? we have a bunch of pdf's which need to be password protected.

        A 1 Reply Last reply
        0
        • G godzooky

          you are correct. thank you. i changed the file name to .aspx and it worked. however, is it in any way possible to secure non aspx files with forms authentication? we have a bunch of pdf's which need to be password protected.

          A Offline
          A Offline
          Albert Pascual
          wrote on last edited by
          #4

          No worries, what I normally do. I have a directory in the Server with the PDF files and a file called ViewPDF.aspx. The only way to access the PDFs are by ViewPDF.aspx?PDFid=93639 that referece to a pdf file name into the SQL database, so I do Response.Redirect to that file, so they cannot get a bookmark to the PDF location. Makes sense? Cheers Al

          1 Reply Last reply
          0
          • A Albert Pascual

            I thought you can only do private pages for .aspx pages not for htm pages?

            D Offline
            D Offline
            DavidNohejl
            wrote on last edited by
            #5

            Even when you tell IIS that .html files should be handled by ASP.NET? David Never forget: "Stay kul and happy" (I.A.)
            David's thoughts / dnhsoftware.org / MyHTMLTidy

            1 Reply Last reply
            0
            Reply
            • Reply as topic
            Log in to reply
            • Oldest to Newest
            • Newest to Oldest
            • Most Votes


            • Login

            • Don't have an account? Register

            • Login or register to search.
            • First post
              Last post
            0
            • Categories
            • Recent
            • Tags
            • Popular
            • World
            • Users
            • Groups