i loose my authentication ticket, but i am still able to access other pages

[jrodguitar]

If anyone, could help me
I am trying to avoid using cookies (the actual file) but i am appending
the ticket to my URL string.
Purposely, i am not attaching it the ticket to certain pages, just to
check the security.
Unfortunately i can access those pages, but i believe i should not.
I am going from the webpages in the menu folder, to the webpages in the
mypages folder.
I secure each folder in my web app in the web.config file in the
following manner:
<location path="mypages">
<system.web>
<authorization>
<deny users ="?"/>
</authorization>
</system.web>
</location>
<location path="menu">
<system.web>
<authorization>
<deny users ="?"/>
</authorization>
</system.web>
</location>
Any ideas??
J.

 

[Guest]

Elrod,
Rule one of security: Don't make your own security.

IIS web application properties asp.net configuration. Ask in another group
if you still need help.

Good Luck
DWS