How protect non aspx files using Forms Authentication?

Using Forms Authentication, users can't get to my .aspx pages but they can
get directly to, for example, Setup.exe.



What setting can I use to protect ALL files within my app from hackers until
they login?



My web.config currently looks like this:



<authentication mode="Forms">

<forms loginUrl="frmLogin.aspx" />

</authentication>



<authorization>

<deny users="?" />

</authorization>



Thanks!

Ron Cook


.

Relevant Pages

  • Re: How protect non aspx files using Forms Authentication?
    ... >Using Forms Authentication, users can't get to my .aspx pages but they can ... >What setting can I use to protect ALL files within my app from hackers until ... folder and allow only logged on users to access that folder. ...
    (microsoft.public.dotnet.languages.csharp)
  • RE: IIS protection
    ... "Is there another way to protect the server or allow individual user ... Sure, to achieve this, enabling user authentication is necessary: ... Use NTFS Security to Protect a Web Page Running on IIS 4.0 or ... enable either Basic authentication or Integrated windows auth: ...
    (microsoft.public.inetserver.iis)
  • ASP.NET, role-based security and SecurityPermission.ControlPrincipal
    ... I'm trying to figure out a reasonable security policy for my ASP.NET 1.1 ... securing the authentication chain in ASP.NET forms authentication. ... The COM+ application is configured to runas the account described ... I configure the directory that contains .aspx pages to be writeable only ...
    (microsoft.public.dotnet.security)
  • Re: Using WebService In ASPX
    ... authentication method from the insert method and roll in that direction. ... the ASMX, depending on how the user is using the system). ... the "UI" is ASPX or ASMX. ... Dim sqlCmd As SqlCommand ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Forms Based Authentication Issue (VIEWSTATE) Login Form On Non Protected Page
    ... I have it all working fine and pages I want to protect show a login ... login form on an area of their homepage. ... CLASSIC ASP SCENARIO) ... this using the built in forms authentication structure of .NET. ...
    (microsoft.public.dotnet.framework.aspnet.security)