Hi Xenophon,
Welcome to ASPNET newsgroup.
Regarding on the prevent client user from visiting web directory by
HttpForbidden handler, I'm afraid ASP.NET httphandler can not do this.
Because ASP.NET http handler can only intercept document based url (which
has a certain file extension). for directory path , it can only be
intercepted by raw IIS isapi filters or extensions. Also, if we want to
prevent a certain IIS virtual dir from being navigated by client user, we
can set the access setting in IIS's home directory setting of that
virtual dir.
Thanks,
Steven Cheng
Microsoft Online Support
Get Secure!
www.microsoft.com/security
(This posting is provided "AS IS", with no warranties, and confers no
rights.)
--------------------
| NNTP-Posting-Date: Wed, 02 Nov 2005 15:53:59 -0600
| From: xenophon <
[email protected]>
| Newsgroups: microsoft.public.dotnet.framework.aspnet
| Subject: System.Web.HttpForbiddenHandler and Directory?
| Date: Wed, 02 Nov 2005 16:43:23 -0500
| Message-ID: <
[email protected]>
| X-Newsreader: Forte Agent 2.0/32.646
| MIME-Version: 1.0
| Content-Type: text/plain; charset=us-ascii
| Content-Transfer-Encoding: 7bit
| Lines: 7
| X-Trace:
sv3-zZBdBOtK/4bynHaDS3fxWaHVKTcIc/2glIQ+1iL5/LMi3vXTIrBaAzaK3uZkVylW/1zR3ODS
z6mzsDr!iHvYODIbat3bwg6w90O3W6DpU6/l2D9EJhhdqfZS49/HAyxMBCQDVHVikGZM5Lp2lv7u
8g==
| X-Complaints-To: (e-mail address removed)
| X-DMCA-Notifications:
http://www.giganews.com/info/dmca.html
| X-Abuse-and-DMCA-Info: Please be sure to forward a copy of ALL headers
| X-Abuse-and-DMCA-Info: Otherwise we will be unable to process your
complaint properly
| X-Postfilter: 1.3.32
| Path:
TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!newsfeed00.sul.t-online.de!t-onli
ne.de!border2.nntp.dca.giganews.com!border1.nntp.dca.giganews.com!nntp.gigan
ews.com!local01.nntp.dca.giganews.com!news.giganews.com.POSTED!not-for-mail
| Xref: TK2MSFTNGXA01.phx.gbl
microsoft.public.dotnet.framework.aspnet:135654
| X-Tomcat-NG: microsoft.public.dotnet.framework.aspnet
|
|
| I am using System.Web.HttpForbiddenHandler to prevent access to 5
| types of files in a web directory. Is it posible to protect the
| directory itself with that handle (or any other way)?
|
| Thanks.
|
|
