Form authentication for subfolders only

[Maziar Aflatoun]

Hi,

I'm trying to protect one of my subfolders from Web.config file in my root
folder. Here is my directory structure

/ // My shopping cart
/admin // Shopping cart admin which needs to be protected

Now in my Web.config how can I protect just the /admin folder (which is not
a virtual directory) it's simply a folder in my / folder?

I tried

<authentication mode="Forms">
<forms name="CartAdmin" loginUrl="admin/Login.aspx" timeout="30"
protection="All" path="/admin" />
</authentication>
<authorization>
<deny users="?" />
</authorization>

but it doesn't work. Even when you try to access files in my / folder it
redirects you to my /admin/login.aspx file

Thank you
Maz

[Curt_C [MVP]]

look into the <location> tag for the web.config. This type of thing is what
it's for.
Allows you to override things on a per file (and possibly dir) level.

--
Curt Christianson
Owner/Lead Developer, DF-Software
Site: http://www.Darkfalz.com
Blog: http://blog.Darkfalz.com
"Maziar Aflatoun" <ma***@rogers.com> wrote in message
news:VZ*****************@news04.bloor.is.net.cable .rogers.com...

Hi,

I'm trying to protect one of my subfolders from Web.config file in my root
folder. Here is my directory structure

/ // My shopping cart
/admin // Shopping cart admin which needs to be protected

Now in my Web.config how can I protect just the /admin folder (which is not a virtual directory) it's simply a folder in my / folder?

I tried

<authentication mode="Forms">
<forms name="CartAdmin" loginUrl="admin/Login.aspx" timeout="30"
protection="All" path="/admin" />
</authentication>
<authorization>
<deny users="?" />
</authorization>

but it doesn't work. Even when you try to access files in my / folder it
redirects you to my /admin/login.aspx file

Thank you
Maz

[John Saunders]

"Maziar Aflatoun" <ma***@rogers.com> wrote in message
news:VZ*****************@news04.bloor.is.net.cable .rogers.com...

Hi,

I'm trying to protect one of my subfolders from Web.config file in my root
folder. Here is my directory structure

/ // My shopping cart
/admin // Shopping cart admin which needs to be protected

Now in my Web.config how can I protect just the /admin folder (which is not a virtual directory) it's simply a folder in my / folder?

I tried

<authentication mode="Forms">
<forms name="CartAdmin" loginUrl="admin/Login.aspx" timeout="30"
protection="All" path="/admin" />
</authentication>
<authorization>
<deny users="?" />
</authorization>

but it doesn't work. Even when you try to access files in my / folder it
redirects you to my /admin/login.aspx file

Take a look at the <location> element:

<configuration>
<system.web>
<authorization>
<allow users="*"/>
</authorization>
</system.web>
<location path="/admin">
<system.web>
<authorization>
<deny users="?"/>
</authorization>
</system.web>
</location>
</configuration>
--
John Saunders
johnwsaundersiii at hotmail

[Maziar Aflatoun]

I did add the following lines to my Web.config
<location path="/admin">
<system.web>
<authorization>
<deny users="?"/>
</authorization>
</system.web>
</location>

But now it says,
Error while trying to run project: Unable to start debugging on web
server....etc.

Any idea why?

thanks
Maz.
"John Saunders" <jo**************@notcoldmail.com> wrote in message
news:%2****************@TK2MSFTNGP11.phx.gbl...

"Maziar Aflatoun" <ma***@rogers.com> wrote in message
news:VZ*****************@news04.bloor.is.net.cable .rogers.com...

Hi,

I'm trying to protect one of my subfolders from Web.config file in my
root
folder. Here is my directory structure

/ // My shopping cart
/admin // Shopping cart admin which needs to be protected

Now in my Web.config how can I protect just the /admin folder (which is

not

a virtual directory) it's simply a folder in my / folder?

I tried

<authentication mode="Forms">
<forms name="CartAdmin" loginUrl="admin/Login.aspx" timeout="30"
protection="All" path="/admin" />
</authentication>
<authorization>
<deny users="?" />
</authorization>

but it doesn't work. Even when you try to access files in my / folder it
redirects you to my /admin/login.aspx file

Take a look at the <location> element:

<configuration>
<system.web>
<authorization>
<allow users="*"/>
</authorization>
</system.web>
<location path="/admin">
<system.web>
<authorization>
<deny users="?"/>
</authorization>
</system.web>
</location>
</configuration>
--
John Saunders
johnwsaundersiii at hotmail

[John Saunders]

"Maziar Aflatoun" <ma***@rogers.com> wrote in message
news:aX***************@news04.bloor.is.net.cable.r ogers.com...

I did add the following lines to my Web.config
<location path="/admin">
<system.web>
<authorization>
<deny users="?"/>
</authorization>
</system.web>
</location>

But now it says,
Error while trying to run project: Unable to start debugging on web
server....etc.

Any idea why?

I have no idea at all. Did you put the <location> tag at the end of the
web.config, just before the </configuration> tag? That's where I usually put
it. Also, try changing the deny to allow and see what happens.
--
John Saunders
johnwsaundersiii at hotmail