subfolders/security

I've placed certain .aspx & .html pages into a subfolder called
MembersArea to which a successful logon will take the user.
Here's what I'm assuming: Both my main web folder and my MembersArea
subfolder need their own unique web.config file, correct?
I'm also assuming that by designing a custom logon page I'm using
"Forms Authentication" (?)
I've tried to put the pieces together as to what to put into the
web.config files to secure them such as:







Am I on the right track here and do I need also in the web.config
file
to reference the login.aspx page?


Thanks!!

RE: subfolders/security

No, subfolders do not require their own web.config file. An alternative:











--
Site: http://www.eggheadcafe.com
UnBlog: http://petesbloggerama.blogspot.com
Short Urls & more: http://ittyurl.net


"slinky" wrote:

> I've placed certain .aspx & .html pages into a subfolder called
> MembersArea to which a successful logon will take the user.
> Here's what I'm assuming: Both my main web folder and my MembersArea
> subfolder need their own unique web.config file, correct?
> I'm also assuming that by designing a custom logon page I'm using
> "Forms Authentication" (?)
> I've tried to put the pieces together as to what to put into the
> web.config files to secure them such as:
>
>
>
>
>
>
>
> Am I on the right track here and do I need also in the web.config
> file
> to reference the login.aspx page?
>
>
> Thanks!!
>
>

Re: subfolders/security

thanks! I was going down the wrong path obviously.
My scenario extends to I have a registration page (Name, EmailAddress,
Password) and a login page (Name, Password).
I'm using any XML file to store that info (necessity in our business).
How can I apply the "" to this setup? Should I
add a node onto my XML for "Role"?

Here's what my XML looks like:




kenneth.gay@wachovia.com
Ken Gay
helsinki


jeffstansen@hotmail.com
Jeff Stansen
tazmania


kleinpatter@yahoo.com
EdKlein
primative



Thanks!


On Apr 2, 8:49=A0am, Peter Bromberg [C# MVP]
wrote:
> No, subfolders do not require their own web.config file. An alternative:
>
>
> =A0
> =A0 =A0
> =A0 =A0 =A0
> =A0 =A0 =A0
> =A0 =A0
> =A0
>
>
> --
> Site:http://www.eggheadcafe.com
> UnBlog:http://petesbloggerama.blogspot.com
> Short Urls & more:http://ittyurl.net
>
>
>
> "slinky" wrote:
> > I've placed certain .aspx & .html pages into a subfolder called
> > MembersArea to which a successful logon will take the user.
> > Here's what I'm assuming: Both my main web folder and my MembersArea
> > subfolder need their own unique web.config file, correct?
> > I'm also assuming that by designing a custom logon page I'm using
> > "Forms Authentication" (?)
> > I've tried to put the pieces together as to what to put into the
> > web.config files to secure them such as:
>
> >
> > =A0 =A0
> >
>
> > Am I on the right track here and do I need also in the web.config
> > file
> > to reference the login.aspx page?
>
> > Thanks!!- Hide quoted text -
>
> - Show quoted text -