Posted by Alec on Sat, 28 Feb 2009, in ASP.NET C#
Applying security for a web application is a very common task. There are always parts on a web site that requires private only access for members. Recently, I tried to use the form authentication method provided by .NET and found it quite simple to use, though I have always done it with sessions. The logic is simply, having this form authentication setting done in the main root web.config, and then for each folders you want to protect, simply add a sub web.config with deny and allow settings. Some very good articles to get a hand on this: