IanIan
02-09-2010, 07:43 PM
Hi,
I set up the following in web.config...
<location path="XANDY2.jpg">
<system.web>
<authorization>
<deny users="*"/>
</authorization>
</system.web>
</location>
...and requested the file and was redirected to the log in page. Great! ASP.net authorization working with non-asp.net files.
Then I tried adding this to web.config...
<system.webServer>
<modules runAllManagedModulesForAllRequests="true">
<remove name="FormsAuthentication" />
...
...and as expected I was able to request /XANDY2.jpg without having to log in.
Now, I then removed the '<remove name="FormsAuthentication" />' and I can still request /XANDY2.jpg without loggin in.
So I turned it off and now it won't come back on again! Any ideas?
Cheers, I.
I set up the following in web.config...
<location path="XANDY2.jpg">
<system.web>
<authorization>
<deny users="*"/>
</authorization>
</system.web>
</location>
...and requested the file and was redirected to the log in page. Great! ASP.net authorization working with non-asp.net files.
Then I tried adding this to web.config...
<system.webServer>
<modules runAllManagedModulesForAllRequests="true">
<remove name="FormsAuthentication" />
...
...and as expected I was able to request /XANDY2.jpg without having to log in.
Now, I then removed the '<remove name="FormsAuthentication" />' and I can still request /XANDY2.jpg without loggin in.
So I turned it off and now it won't come back on again! Any ideas?
Cheers, I.