Tag Info

New answers tagged


One option is to password protect the folder. This is using IIS 7 as an example: Open IIS Manager (start >> run >> inetmgr.msc) Go to the website where you want to password protect the folder. Click on the folder that you want to set to require a password. Double Click on Authentication, Disable Anonymous Authentication. Enable Basic Authentication.


HTTP status status message 403 means the client doesn't have the access rights, that's why you are getting this response. HTTP PUT methods requires authorization to give access to the server content. Since PUT is dangerous method, if proper security mechanism is not used to restrict the users. So if you want to put some content on the server so you must use ...


There are times when an attacker might have access to retrieve data from your database (e.g. SQL Injection) but not have enough access to extract the encryption key from your web.config. In these situations this practice would add another layer of defense against user credential cracking. It definitely isn't foolproof since a compromise at the server OS ...


No, when you encrypt a web.config section, you specify which application and site the configuration belongs to. The container is going to be specific to that site and application, and will not be accessible to other applications. If you control the system, then you can do whatever you want, including just decrypting the section. There is no protection ...

Top 50 recent answers are included