Security Issues - help needed please

[Stephen Cairns]

I have a small security problem. I have a number of pages on a server and I want things set-up so as the user can't get into other pages without going to the index page and logging in first. At present the user can easily type in the name of one of the pages in the system and get direct access to it. For exampl
typing in http://marketserv1:4000/Logon.asp gets them straight into the main page of the system.

Does anyone know how to set things so as you can only get to other pages from the index page which is:
http://marketserv1:4000/Index.asp

 

[Dominic Marsat]

Do you have direct access to the server?

I assume you're running IIS (what version?)

IIS supports a number of authentication methods.

Anonymous access is enabled by default.

You can enable Basic authentication (clear text
passwords) or integrated windows authentication
where access is restricted using NTFS
permissions.

I have a small security problem. I have a number of pages on a server and

I want things set-up so as the user can't get into other pages without going
to the index page and logging in first. At present the user can easily type
in the name of one of the pages in the system and get direct access to it.
For example

typing in http://marketserv1:4000/Logon.asp gets them straight into the main page of the system.

Does anyone know how to set things so as you can only get to other pages

from the index page which is: -

 

[Stephen Cairns]

Cheers for help, but managed to get things sorted using a session variable.

 

[Jeff Cochran]

I have a small security problem. I have a number of pages on a server and I want things set-up so as the user can't get into other pages without going to the index page and logging in first. At present the user can easily type in the name of one of the pages in the system and get direct access to it. For example
typing in http://marketserv1:4000/Logon.asp gets them straight into the main page of the system.

Does anyone know how to set things so as you can only get to other pages from the index page which is: -
http://marketserv1:4000/Index.asp

Not an ASP issue. Use authentication, see here:

http://www.iisfaq.com/default.aspx?View=P78&P=145

Jeff