restricting non asp.net files while using form authentication

[amit]

hi,

I have a web application using forms based authentication. I want to
restrcit even the non asp.net files from forms authentication i.e I do not
want that my clients should be able to access the word files, ,xls, pdf etc
from outside project. Actually these files appear as links like :
http://hp-amit/testfolder/abc.doc

now if i copy this link and directly type this without loging on to the site
it would still access it. whereas if i try an access any other ASPX page, it
redirects to the login page.
One way of solving this is that I edit the IIS Mappings to support these
files but I want to use it programmaticall y thru code and not thru IIS.

If there is no other viable solution, Is there a script available which can
be executed to automate this task/

thanks in advance.

bye
amit purohit

[avnrao]

in your web.config for that application..tr y this

<httpHandlers >
<add verb="*" path="*.doc" type="System.We b.HttpForbidden Handler"/>
</httpHandlers>

Av.

"amit" <am**********@r systems.com> wrote in message
news:eH******** ******@TK2MSFTN GP12.phx.gbl...

hi,

I have a web application using forms based authentication. I want to
restrcit even the non asp.net files from forms authentication i.e I do not
want that my clients should be able to access the word files, ,xls, pdf
etc
from outside project. Actually these files appear as links like :
http://hp-amit/testfolder/abc.doc

now if i copy this link and directly type this without loging on to the
site
it would still access it. whereas if i try an access any other ASPX page,
it
redirects to the login page.
One way of solving this is that I edit the IIS Mappings to support these
files but I want to use it programmaticall y thru code and not thru IIS.

If there is no other viable solution, Is there a script available which
can
be executed to automate this task/

thanks in advance.

bye
amit purohit

[amit]

hi,

even then i would have to do IIS mappings, I want to move away from this
problem of configuring IIS for extensions or what I can instead do is
automate this job, but for that I would need a script ,

thanks for the prompt reply last time ,
bye
amit
"avnrao" <av*@newsgroups .com> wrote in message
news:%2******** ********@tk2msf tngp13.phx.gbl. ..

in your web.config for that application..tr y this

<httpHandlers >
<add verb="*" path="*.doc" type="System.We b.HttpForbidden Handler"/>
</httpHandlers>

Av.

"amit" <am**********@r systems.com> wrote in message
news:eH******** ******@TK2MSFTN GP12.phx.gbl...

hi,

I have a web application using forms based authentication. I want to
restrcit even the non asp.net files from forms authentication i.e I do not want that my clients should be able to access the word files, ,xls, pdf
etc
from outside project. Actually these files appear as links like :
http://hp-amit/testfolder/abc.doc

now if i copy this link and directly type this without loging on to the
site
it would still access it. whereas if i try an access any other ASPX page, it
redirects to the login page.
One way of solving this is that I edit the IIS Mappings to support these
files but I want to use it programmaticall y thru code and not thru IIS.

If there is no other viable solution, Is there a script available which
can
be executed to automate this task/

thanks in advance.

bye
amit purohit