How would I go about doing this?
Scenario: User signs on to the website, which is completely classic ASP written, his session is active. He has the permissions to access files which is great. Now, because he's signed in, the URL to the file can be copied and sent over to another browser, or another person across the globe, and that person can still access the file WITHOUT SIGNING IN.
How do I stop this?
In all my other classic ASP pages, I have a login verification script, that bumps a user off to the login page if trying to access ASP pages, but when it comes to documents, all they need is a URL to the file, and they can open it.
Is there something I need to do in IIS? What am I missing?
Start Free Trial
