Directory security problem

[Jon]

I made a subdirectory in our root web folder and placed a web.config file
with the following in it:
<?xml version="1.0" encoding="utf-8" ?>
<configuration>
<system.web>
<authorization>
<deny users="*"/>
</authorization>
</system.web>
</configuration>

Yet, I am still able to view text files in that directory. What am I doing
wrong here? The directory is used simply to store log files generated
during use of the asp.net site, but I don't want them available to anyone,
except for local machine viewing.

 

[Ivan Belov]

Hello Jon,

The reason for that most likely is that your log files have file extention
that is not mapped to ASP.NET (for example .log or .txt).

Go here for details: http://support.microsoft.com/kb/815152/EN-US/

/Ivan Belov/