I have an admin that is password protected using web.config using web forms, it works ok.
Although I can't access any .aspx file (it redirects correctly to the login page), I do can access to for example, images directory or fckeditor (the wysiwyg editor) upload features (html and image files).
I'm trying to disallow the access to this content, but I can't.
I'm using 2 web.config files, once for the main site and the other for the admin, and the admin itself is configured as an application in IIS. In the web.config for the admin I add this, with no luck:
<location path Go to the complete details ...