Re: Deny access to htm files

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Joyjit Mukherjee (joyjit_mukherjee_at_hotmail.com)
Date: 01/13/05 

Date: Thu, 13 Jan 2005 11:08:14 +0530

Hi,

How long are you persisting the cookie for Forms Authentication. The said
url is accessible because within a browser session, the cookie still exist.
Try calling FormsAuthentication.Signout() in the initial Page_Load before
you redirect to your login page.

Hope that helps.

Joyjit

"Brian Linden" <brian@ineedadip.com> wrote in message
news:%23no8teQ%23EHA.2180@TK2MSFTNGP12.phx.gbl...
> I have a web application using forms authentication and everything seemed
to
> be working fine, as far as requiring them to login.
>
> But then I noticed that you could type in:
> http://domain.com/restrictefolder/test.htm
>
> How do I deny access to a folder full of .htm files that I don't want them
> to read unless they have logged in?
>
>

Relevant Pages

  • RE: A little problem with Forms authentication :-(
    ... I'm using forms authentication and the user is getting authenticated no ... should be redirected to the login page. ... I've set the time out for the cookie to the test value of 1 ... redirect from login bit because as I understand it, ...
    (microsoft.public.dotnet.framework.aspnet)
  • RE: Forms authentication cookie handling question (C#)
    ... programmatically generate forms authentication ticket and set it in ASP.NET ... You use the Login control's "Authentication" event to do the user ... LoginControl's default code logic to generate authentication cookie. ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Forms Authentication Name property
    ... you specify the name to be used for the authentication ... login page, then this can work. ... A cookie is saved by the BROWSER and ... The BROWSER chooses ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: SSL Forms Authentication Redirect - Problem Redirecting out of HTTPS
    ... allowing an authentication cookie to be passed over an HTTP ... My login script goes into SSL just fine. ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • RE: Authentication Ticket Persistance
    ... applications which both use forms authentication. ... web.config that points the login page to the login page of the second ... The second application has one button which gets the cookie, ... My sample worked fine if both web applications were on the same machine ...
    (microsoft.public.dotnet.framework.aspnet.security)