How to stop exe to download even directory browsing is off

Question

0.00/5 (No votes)

See more:

I have location on the IIS. To that location Directory browsing is Turned Off. But I have .exe file in the folder. User is able to download the exe file when he gives the full path in the browser. Any Suggestions how i can re direct to dummy page when tries to access the .exe file.

-TIA

What I have tried:

I have location on the IIS. To that location Directory browsing is Turned Off. But I have .exe file in the folder. User is able to download the exe file when he gives the full path in the browser. Any Suggestions how i can re direct to dummy page when tries to access the .exe file.

Posted 14-Mar-16 1:40am

MYQueries1

Updated 14-Mar-16 2:15am

Add a Solution

1 solution

Add a Solution

Add your solution here

Treat my content as plain text, not as HTML

Preview 0

…

Existing Members

Sign in to your account

...or Join us

Download, Vote, Comment, Publish.

Your Email
Password
Forgot your password?

Your Email
This email is in use. Do you need your password?
Optional Password

I have read and agree to the Terms of Service and Privacy Policy
Please subscribe me to the CodeProject newsletters

When answering a question please:

Read the question carefully.
Understand that English isn't everyone's first language so be lenient of bad spelling and grammar.
If a question is poorly phrased then either ask for clarification, ignore it, or edit the question and fix the problem. Insults are not welcome.
Don't tell someone to read the manual. Chances are they have and don't get it. Provide an answer or move on to the next question.

Let's work to help developers, not make them feel stupid.

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)

Andy Lanng · Answer 1 · 2016-03-14T02:15:00

Solution 1

If you want to prevent all *.exe files being downloaded, then you can remove the mime type definition from the site. Without a mime handler the end user cannot get a file with that extension

Posted 14-Mar-16 2:15am

Andy Lanng

Comments

MYQueries1 14-Mar-16 8:21am

I want to block for un-authorized . not for all users

Andy Lanng 14-Mar-16 9:51am

maybe this will help?
How to prevent anonymous users from accessing a file using forms authentication?

MYQueries1 14-Mar-16 10:36am

Thing is my exe file is kept in another server. Which is not same where my webapplication hosted

Andy Lanng 14-Mar-16 11:49am

Oh in that case:
Change the permissions of that folder so that no one can access it bar the IIS account (IIS_USRS i think), then create a handler in the webapp (ashx) to download the file if requested correctly. ashx files are very much like aspx files in that they have a copy of the Request instance. Within that instance you can look at the user and user roles.
If you cannot restrict access to the folder then the issue is with the setup of your servers. You must restrict the folder so it cannot be seen by the public, even if browsing is turned off (browsing off only means that they can't see the folder structure, they can still access files in the structure.