forms security

[Troy]

I'm trying to setup form security through the web.config file but users can
still get to the protected page by typing in the url. Here's my web.config
authentication settings. Any help is appreciated.

Thanks

<authentication mode="Forms">

<forms name="myapplication"

loginUrl="LoginPage.aspx"

protection="All"

timeout="60" >

</forms>

</authentication>

 

[Nicholas Paldino [.NET/C# MVP]]

Troy,

In the <authorization> tag, you want to place a <deny> element, where
the users attribute is "?", indicating that anonymous users should be
denied.

Hope this helps.