Ways to secure Data in Parent Directory of website

Question

0.00/5 (No votes)

See more:

Is there any way by which we can secure our data from the clients.

Or

Can we put authentication over parent directory.

examples:Generally to access the images used in website can be accessed like this:

www.websitename.com/images/

How to put limit on that.

Posted 21-Sep-12 7:28am

footballpardeep

Add a Solution

2 solutions

Solution 2

You can disable directory browsing. Refer:
How to enable directory browsing with IIS7 web.config [^]

Further, using authentication and authorization, you can put security permissions on any folder of your application:
ASP.NET authentication and authorization[^]
MS Support: HOW TO: Control Authorization Permissions in an ASP.NET Application[^]

Posted 21-Sep-12 7:58am

Sandeep Mewara

Comments

footballpardeep 21-Sep-12 14:05pm

thanks

Sandeep Mewara 21-Sep-12 14:10pm

Welcome.

footballpardeep 21-Sep-12 14:21pm

<configuration>
<system.web>
<authorization>
<deny users="?">

I added this code to subdirectory of images.But still i am able to access it.

Sandeep Mewara 21-Sep-12 14:23pm

Did you go through the links I shared?

footballpardeep 21-Sep-12 14:26pm

http://www.tarkia.com/blog/tag/asp-net-authorization/ , i used this link, to restrict access to subdirectory

Add a Solution

Add your solution here

Treat my content as plain text, not as HTML

Preview 0

…

Existing Members

Sign in to your account

...or Join us

Download, Vote, Comment, Publish.

Your Email
Password
Forgot your password?

Your Email
This email is in use. Do you need your password?
Optional Password

I have read and agree to the Terms of Service and Privacy Policy
Please subscribe me to the CodeProject newsletters

When answering a question please:

Read the question carefully.
Understand that English isn't everyone's first language so be lenient of bad spelling and grammar.
If a question is poorly phrased then either ask for clarification, ignore it, or edit the question and fix the problem. Insults are not welcome.
Don't tell someone to read the manual. Chances are they have and don't get it. Provide an answer or move on to the next question.

Let's work to help developers, not make them feel stupid.

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)

Tadit Dash (ତଡିତ୍ କୁମାର ଦାଶ) · Accepted Answer · 2012-09-21T07:57:00

Solution 1

URL Authorization in ASP.NET – Securing your websites[^] explains how to set security permissions on individual web pages, web services and sub directories.

Please have a look.

Posted 21-Sep-12 7:57am

Tadit Dash (ତଡିତ୍ କୁମାର ଦାଶ)

Comments

footballpardeep 21-Sep-12 14:05pm

thanks

Tadit Dash (ତଡିତ୍ କୁମାର ଦାଶ) 21-Sep-12 14:18pm

Anytym... My pleasure...

Thanks a lot...

footballpardeep 21-Sep-12 14:20pm

I added it to subdirectory. But i still able to access.

<pre>

<configuration>
<system.web>
<authorization>
<deny users="?">

</pre>

Tadit Dash (ତଡିତ୍ କୁମାର ଦାଶ) 21-Sep-12 14:26pm

There is nothing in between the pre tags...
You have missed something I guess...

footballpardeep 21-Sep-12 14:28pm

i pasted the code, but is not visible, i used ur link, of restricting access to subdirectory

Tadit Dash (ତଡିତ୍ କୁମାର ଦାଶ) 21-Sep-12 14:30pm

Use "code" tags instead of "pre" tags...

footballpardeep 21-Sep-12 14:32pm

tags

<configuration>
<system.web>
<authorization>
<deny users="?">

tags

Tadit Dash (ତଡିତ୍ କୁମାର ଦାଶ) 21-Sep-12 14:33pm

Don't use any tags, only post the code now.

footballpardeep 21-Sep-12 14:37pm

it's again not visible

footballpardeep 21-Sep-12 14:40pm

I have just aded a new web.config file to subdirectory.

xml version="1.0"?
configuration
system.web
authorization
deny users="?"
authorization
system.web
configuration
***************************
i removed < >from the code

footballpardeep 21-Sep-12 14:54pm

solved thanks

Tadit Dash (ତଡିତ୍ କୁମାର ଦାଶ) 21-Sep-12 14:57pm

Oh so finally. Congrats...
If it had helped you, then mark it as answer to help others searching the solution easily... You will also be awarded for this action... :) :)

Thanks a lot...

Tadit Dash (ତଡିତ୍ କୁମାର ଦାଶ) 21-Sep-12 15:19pm

Thanks for accepting...