hi all i feel like ive it a brick walll and im hoping you can help?
i have a subdirectory off of oot that has several adinistration pages that i wish only admin to be able to access
My main web.config s as follows
<authentication mode="Forms">
<forms loginUrl="enter.aspx" name=".ASPXFORMSAUTH"/>
</authentication>
ive added a web.config to the subfolder with the following rules
<configuration>
<system.web>
<authorization>
<deny users="?"/>
</authorization>
</system.web>
</configuration>
but anyone can access the pages within the administration folder without logging in
any help greatly appcerated thnks tim. Go to the complete details ...