<authentication mode="Forms">
<forms name="myCookie" loginUrl="Default.aspx" cookieless="UseDeviceProfile" protection="All" requireSSL="false" enableCrossAppRedirects="false" defaultUrl="Default.aspx" />
</authentication>
<authorization>
<deny users="?"/>
</authorization>
I've added forms authentication to my web site as above. I was expecting to have to explicitly allow acces to images and themes too, but everything actually looks fine leading me to believe that authentication might not be working correctly.
Why is the above still serving images and themes? thanks
...
Go to the complete details ...