I'd like to know about the Forms Authentication in ASP.Net.
I have some forms including

1. login.aspx
2. default.aspx
3. admin_panel.aspx .....

I write the following code in web.config.

<authentication mode="Forms">
    <forms name="myproject" loginUrl="login.aspx" />
</authentication>

<authorization>
    <deny users="?" />
</authorization>

I only want to do forms authentication for admin pages.
I don't want default.aspx to be included in forms authentication.

How should I do??? Please help me.

Thanks,
TW

You can add a <location> tag in your web.config file, outside system.web but still inside configuration like this:

<location path="Admin">
    <system.web>
      <authorization>
        <allow roles="Administrator" />
        <deny users="*"/>
      </authorization>
    </system.web>
  </location>
</configuration>

This blocks the folder Admin for all users except for Administrators

HtH,

Imar
---------------------------------------
Imar Spaanjaars
Everyone is unique, except for me.
While typing this post, I was listening to: 6 Minutes by Tricky (Track 5 from the album: Angels With Dirty Faces) What's This?

Hello Friends,

Cud you tell me which authentication wud be better to use between Forms Authentication and Windows Authentication.

Regards,
Muskaan.

I think no one is bothered to answer my questions........

anyways......thanx.......

regards,
muskaan.

I got the answer myself.........

Windows authentication is said to be of high priority over Forms Based Authentication........

anyways, thanks.....

Regards,
Muskaan.