i have an application in which a folder "secure" is restricted
code for web.config
<?xml version="1.0"?>
<configuration>
<appSettings/>
<system.web>
<compilation debug="false"/>
<authentication mode="Forms">
<forms name=".AUTH" loginUrl="adminLogin.aspx" protection="All" timeout="30" defaultUrl="Secure/securepage.aspx">
<credentials passwordFormat="MD5">
<user name="admin" password="E10ADC3949BA59ABBE56E057F20F883E"/>
</credentials>
</forms>
</authentication>
<authorization>
<allow users="*"/>
</authorization>
<trace enabled="true" localOnly="false"/>
</system.web>
<location path="Secure">
< ...
Go to the complete details ...