Hall of Fame

1. abel981,693
2. guru_sami764,050
3. TheLearn...530,855
4. CodeCruiser439,606
5. nmarun431,054
6. GiftsonDJ...364,715
7. aibusines...314,444
8. Juan_Bar...310,594
9. x_com306,380
10. Dhaest300,866
11. jinal294,858
12. CB_Thiru...294,313
13. carlnorrbom258,132
14. davrob60252,917
15. sunithnair237,805
16. DropZone234,070
17. praveenv...232,932
18. prairiedog220,925
19. burakiewicz216,947
20. daveamour215,055
21. Omego2K213,665
22. ragi0017208,315
23. HainKurt206,459
24. angelIII201,692
25. wht1986186,866

1. TheLearn...3,568,317
2. samtran0...2,728,399
3. raterus2,081,290
4. nauman_...1,216,228
5. sammy1...1,193,317
6. Rejojohny1,121,409
7. abel1,016,343
8. mmarinov996,221
9. scolja962,242
10. prairiedog921,362
11. Dhaest793,214
12. guru_sami764,050
13. angelIII759,102
14. Juan_Bar...648,279
15. lem2802634,188
16. AerosSaga600,606
17. TimCottee580,519
18. pratima_...579,106
19. Edwin_C568,753
20. CodeCruiser542,665
21. x_com530,881
22. tusharashah517,701
23. Justin_W489,746
24. strickdd487,968
25. carl_tawn470,356

	[x] Posted via EE Mobile
	Search, ask, and monitor your questions on the go with EE Mobile. Visit Experts Exchange from your mobile device and never be out of touch again.

Question

	[x] Attachment Details

[x]

The Solution Rating System

With so many solutions, how can you tell which solutions are most likely to help you and which ones are not? To provide you with a tool to use, we rate our solutions based on various elements that most accurately determine if a solution is a quality solution. To explain what factors affect the solution rating, here are the elements we take into consideration when formulating our solution rating.

The Grade of the Solution
The Zone Rank of the Expert Providing the Solution
The Number of Author and Expert Comments
The Number of Experts Contributing
The Feedback of the Community

Your Input Matters
Because of the way the system is set up, the most important variable in this equation is you. As a member of Experts Exchange, you are able to cast your vote on the quality of the solutions in regard to how complete, accurate, helpful and easy to understand each solution is. When you provide your feedback, each rating is adjusted accordingly. So, if you see a solution that has a poor rating that you think is a good solution, let us know by rating it. As you do, the rating will be adjusted and will become more accurate for other members of our site.

If you have any suggestions that you would like to make for our rating system, please ask a question in the Suggestions Zone of Community Support.

Thank you!

8.2

authentication doesnt deny access to non aspx (htm, pdf, img, etc) files

Asked by stevenbaker in Programming for ASP.NET

Tags: deny

Hi

When you specify authentication in a web.config using (as a simple example):

<authentication mode="Forms">
<forms name="AuthCookie" path="/" loginUrl="login.aspx" protection="All" timeout="30">
<credentials passwordFormat="Clear">
<user name="userA" password="aPassword" />
</credentials>
</forms>
</authentication>
<authorization>
<deny users="?" />
</authorization>

and then navigate to an aspx then you get redirected to the login.aspx

However, when you navigate to a non-aspx page, such as test.htm, test.pdf, test.gif or test.asp you are allowed access.

I previously worked on a project based on ASP (classic) that used Siteserver membership authentication, also via forms login. This works fine and would intercept ANY request and redirect to login if authentication failed.

I have read that a work around is to alter the IIS configuation so that the files (.gif, .pdf, etc) are processed by the aspnet_isapi.dll, but this seems far from ideal
it would also not work for any file that required processing by a different dll (ie .asp files, for which we will have some, which need to be processed by asp.dll)

Is there something that I am missing?
Is it fixed in asp.net 2.0 (am using 1.1)?
if not, any alternatives people have found as this is a bit useless and worse off than back in the grey old days of NT / IIS4 / SiteServer!!

thanks
steve

View the Solution FREE for 30 Days

20091021-EE-VQP-81

authentication doesnt deny access to non aspx (htm, pdf, img, etc) files

Asked by stevenbaker in Programming for ASP.NET

Tags: deny

About this solution