Posted on: 7/15/2013 2:34:54 PM | Views : 226

Hi,
I'm using SQL Server 2008 session states in my web app and also SQL Server Authentication.  The website is intended for deployment on the Internet and only authenticated users are supposed to access it.  I created a SQL Server database that stores the authorized users information.  I haven't deployed the web app yet.
But testing on the dev machine, I could still access the Home.aspx web page just by typing its address on the browser.  I've added this to my web config file:
<location path="Home.aspx">   <system.web>     <authorization>       <allow users="*" />       <deny users="?" />     </authorization>   </system.web> </location>
My Login page is not using ASP.NET control.  I just used username/passwor ...

Go to the complete details ...