Yeah, good advice. The canonicalization issue kinda leaves your
> That would have been my guess too, but you never know... <g>
>
> If it is a web application and your approach is used, it would also be a
> really good idea to implement one of the suggested fixes from
>
http://www.microsoft.com/security/incident/aspnet.mspx. >
>
> "Andreas Håkansson" <andreas.hakansson@nospam.com> wrote in message
> news:%232ZfrbDsEHA.1388@TK2MSFTNGP09.phx.gbl...
>> My guess is a web application in which case you can use the location
>> element in
>> the web.config file to apply settings for various parts of your site.
>> This is the
>> prefered way over using multiple config files.
>>
>> Add the following (adapted) to your web.config
>>
>> <configuration>
>> <location path="/Forum">
>> <system.web>
>> <authorization>
>> <deny users="?"/>
>> </authorization>
>> </system.web>
>> </location>
>> </configuration>
>>
>> This will deny all anonymous (? means anonymous users) access to the
>> /Forum sub
>> folder of your site.
>>
>> HTH,
>>
>> //Andreas
>>
>> "Nicole Calinoiu" <calinoiu REMOVETHIS AT gmail DOT com> skrev i
>> meddelandet news:uTy8bU4rEHA.2008@TK2MSFTNGP12.phx.gbl...
>>> Is this a web application or a Windows Forms application?
>>>
>>>
>>> "Mohamed" <mohamed@binary-works.com> wrote in message
>>> news:%23B68Tm3rEHA.1568@TK2MSFTNGP10.phx.gbl...
>>>> Hi all
>>>> I am using .NET FrameWork 1.1
>>>> and i include in my project a folder named "Forum"
>>>> and i want that nobody can enter the forum folder wizout logining into
>>>> the
>>>> system
>>>> the forum is a subdirectory in my project
>>>> thanks
>>>>
>>>>
>>>
>>>
>>
>>
>
>