secure files using Form base Authentication

[Jayson]

I'm using a Form base authentication (with logon.aspx) to secure all files/subdirectory within the root directory where my web.config file is located. The problem is i have images, PDF, HTML files within that directory that are still accessible to any user by typing the full URL path of the files, for example:

http://www.somesite.com/secured_directory/images/pix.jpg

OR

http://www.somesite.com/secured_directory/PDF/document.pdf

Is there any way to secure all these types of files?

Thanks!

 

[tetorvik]

Hi Jayson,

I hope this helps...

http://www.dotnetjunkies.com/howto/default.aspx?id=20

--Teemu

 

[Jayson]

Thanks! that did it!

 

[crystalized]

On a related topic,

Have any of you experienced problems with forms authentication interfering with virtual directory resolution in IIS.

I have the following scenario

In a default page I redirect to a virtual directory (to a page contained in that virtual directory).

This works flawlessly when you first access the page. But after you authenticate (I am using forms authentication) if you try to go back to that default page the virtual directory is not resolving, resulting in a resource not found error page.

The same problem happens if you are just authenticated or if you have persisted the authentication cookie.

If anyone has experienced the same kind of thing I would appreciate some advice on the topic.

Thanks in advance Crystal
crystalized_s@yahoo.com

--------------------------------------------------

Experience is one thing you can't get for nothing.

-Oscar Wilde