CodeVerge.Net Beta


   Explore    Item Entry    Members      Register  Login  
NEWSGROUP
.NET
Algorithms-Data Structures
Asp.Net
C Plus Plus
CSharp
Database
HTML
Javascript
Linq
Other
Regular Expressions
VB.Net
XML

Free Download:




Zone: > NEWSGROUP > Asp.Net Forum > general_asp.net.security Tags:
Item Type: NewsGroup Date Entered: 1/17/2008 10:11:34 PM Date Modified: Subscribers: 0 Subscribe Alert
Rate It:
(NR, 0)
XPoints: N/A Replies: 2 Views: 29 Favorited: 0 Favorite
Can Reply:  No Members Can Edit: No Online: Yes
3 Items, 1 Pages 1 |< << Go >> >|
Nagash
Asp.Net User
prevent anonymous users from viewing images in image folder1/17/2008 10:11:34 PM

0/0

I have a website that requires login.

 

But I also want to prevent anyone from directly getting any of the css,jpg,etc from the site unless they are logged in thru forms authentication.

How do I do this? 

I was undere the impression that I could just add a web.config file for example on my images folder with this in it:

 <location path="imagesanon">
      <system.web>
         <authorization>
            <allow users="?"/>
         </authorization>
      </system.web>
</location>

 

But that doesnt seem to do the trick.

Any suggestions? 

roni_schuetz
Asp.Net User
Re: prevent anonymous users from viewing images in image folder1/18/2008 12:30:04 AM

0/0

in my point of view i would write an http handler which makes a check on IsAuthenticated.


regards, roni
---
speed up your applications with distributed caching or replicated caching: http://www.sharedcache.com - its free!
mvark
Asp.Net User
Re: prevent anonymous users from viewing images in image folder1/18/2008 10:42:04 AM

0/0

Forms authentication protects ONLY ASP.NET files. To protect non-ASP.NET files, you can configure IIS to let ASP.NET secure static files as explained in this article - http://www.15seconds.com/issue/070104.htm


M.V. 'Anil' Radhakrishna
Web Development Tips, Tricks & Trivia | My Code Gallery

Is ASP.NET AJAX truly cross browser?

Build your own frill-free auto-refreshing ASP.NET Forums feed aggregator!
3 Items, 1 Pages 1 |< << Go >> >|


Free Download:

Books:
Mac OS X Server Essentials Authors: Schoun Regan, Pages: 549, Published: 2006
Pro ASP.NET for SQL Server: High Performance Data Access for Web Developers Authors: Brennan Stehling, Pages: 408, Published: 2007
E-mail Marketing for Dummies Authors: John Arnold, Pages: 336, Published: 2007
Computers in Your Future 2003: Complete Edition Authors: Bryan Pfaffenberger, Pages: 750, Published: 2002
Keep Your Kids Safe on the Internet Authors: Simon Johnson, Pages: 336, Published: 2004
Street Smart Internet Marketing: Tips, Tools, Tactics & Techniques to Market Your Product, Service, Business Or Ideas Online Authors: Justin Michie, Pages: 305, Published: 2007
Professional Community Server Authors: Wyatt Preul, Keyvan Nayyeri, Jose Lema, Jim Martin, Pages: 311, Published: 2007
Take Control Of Tiger Authors: Adam C. Engst, Tonya Engst, Joe Kissell, Glenn Fleishman, Kirk McElhearn, Matt Neuburg, Pages: 344, Published: 2005
Foundation PHP for Dreamweaver 8 Authors: David Powers, Pages: 510, Published: 2005

Web:
Allow or prevent the viewing and installing of a RIS image by a ... Click the folder that contains the RIS folders and files. ... If you prevent a user from viewing or reading the files in an image, you also prevent the user ...
Prevent any image manipulation where a preset has no actions ... Aug 22, 2008 ... It's worth noting that a preset gives users to access any image file in the files folder, regardless of the view permission set on the ...
Restrict direct URL view/download for images | drupal.org However, if the anonymous person know the location of the images ... So how to we prevent direct URL access to view/download the images? ...
QED:News - QED It is now possible to flag any QED page to prevent anonymous users from being able to view it. Currently, this can be accomplished by adding the following ...
SlimFTPd: Config Anonymous - Uniform Server Wiki System Anonymous user profile 2. Matching my music files I have a range of CD cover images. These are large images contained in a separate folder; I would like to ...
SourceForge.net: Files + Images can be made to link to their folder. + Clip link won't show for anonymous users viewing a folder. + Added code to pick_image to prevent it from ...
Direct Image Linking | Gallery ... permissions that prevent an anonymous user from viewing the picture. ... I need the ability to have the direct path to the image. ...
Allow or prevent the installing of a RIS image by a user or group To allow or prevent the installing of a RIS image by a user or group. Open Active Directory Users and Computers. On the View menu, ensure that Advanced ...
Hide Folder :: FAQ There may be two images below a username when viewing posts. ... This is to prevent malicious use of the email system by anonymous users. Back to top ...
Internet Archive Search: subject:"IMAGE VIEWERS" This picture viewer gives users the ability to manage digital photos, ... It enables you to open a specific image file or folder and view and edit any image ...




Search This Site:










createuserwizard title text

even column widths?

pure css tabs menu ( wanted betatesters with good css knowledge)

deployment

vs with ibs query

duplicate entry in aspnet_applications table

documents module - view/download link errors in a child portal

sending data between pages?

modal pages

how to import excel file into sql server using asp.net?

downloading from secure folder

edit permission for the creator of a page

7-yearr projection of asp.net upgrading from classic asp

menu form

confused about using createchildcontrols & render in custom server control

multview - remembering the setactiveview on post back.

classifieds starter kit in sql server 2005

setting property on inherited master page

html calling apsx - how to pass in a variable value?

old_app_code directory problem

calling a subroutine if user presses enter in a textbox

working w/web parts programmatically across post backs

deployment problem & key_down event

code access security problem?

contacts module

difference between web server and application server

wwwcoder - google news source site

eventhandler for clientapicallbackevent....

urgent: masterpage bulletedlist event

form auth question

 
All Times Are GMT