I found a great login form that authenticates against my db. When I log in the 'authenticated page' displays. But, it's not really a secure page.
Here's what I mean. I've got two page: 1) default.aspx (the login page) and 2) the secure page (what I'm logging into)securePage.aspx
I'm hosting it in IIS, instead of going to default.aspx and logging in I can browse straight to securePage.aspx. I don't want that, I want it to be a secure area. I changed the permissions on the page in IIS to remove READ access but that didn't work.
My question is do you handle the secure site area in code or in IIS or how? Appreciate ya'
Here's that link for the form:
Go to the complete details ...