Re: Preventing access to all file types in a directory using ASP.NET

From: Andy G (ajgould_at_iastate.edu)
Date: 02/10/05 

Date: Thu, 10 Feb 2005 09:14:49 -0600

What I have done is very very simple, it may or may not apply to your
situation. This is the article that I found that worked for me.
http://www.derkeiler.com/Newsgroups/microsoft.public.dotnet.framework.aspnet.security/2003-03/0151.html

I added a couple application extensions just like the article said and it
worked great. Very easy fix.

"nickk" <nickk@discussions.microsoft.com> wrote in message
news:559C4C64-1BF3-4EF0-94A4-44A54C7FD5A4@microsoft.com...
> Is it possible to prevent access to all files in a (virtual) directory
using
> ASP.NET and without using an ISAPI filter? I'm quite happy using the
standard
> classes for authentication and authorisation for ASP.NET (.aspx) pages,
but I
> want to stop unauthorised users accessing plain HTML pages, PDF files and
SWF
> files in a directory as well. Can I use HTTPModule for this? Basically, I
> want to interrogate and filter all requests in a particular directory, but
I
> don't want to have to learn C++ just to complete this piece of work.

Quantcast