Hello, maybe somebody can help me here.
I have set up a website on a Hosted site. Anyway I wanted to protect a particular folder so created a forms login with the web.config etc.
anyway that works but if the user knows the full URL of a file in that folder they can simply download the file bypassing any sort of authentication!
as I said it's hosted so my ability to change things is very limited...
are there any workaround for this problem? seems very silly that this appears to be really tricky when it shouldn't be.
apache is a piece of cake to do the same thing...
advice would be greatly appreciated, thanks
...
Go to the complete details ...