I am having issues securing web content on my website. I added a web config file (see below) in my website at the content directory level , which pops up a login box when files are access within the website. This is great, but I can also access the files in this directory directly by typing the path to the content directory www.xxxx.com/contentdir/filename, which is not what I want. I want the login box to appear or not allow the anonoymus user to get access to this content. FORMS authenication works as long as an aspx page is used. Website needs to allow access to anonoymus users but not access to certain content. Am I missing a setting, can someone direct me to same code to protect direct links to website content.
configuration< ...
Go to the complete details ...