Can a user browsing my web site read my web.config or Global.asax files?

agaba175 · 08-01-2006

Nazir · 08-03-2006

No. The <HTTPHANDLERS>section of Machine.config, which holds the master configuration settings for ASP.NET, contains entries that map ASAX files, CONFIG files, and selected other file types to an HTTP handler named HttpForbiddenHandler, which fails attempts to retrieve the associated file. You can modify it by editing Machine.config or including an section in a local Web.config file.

Here are the relevant statements in Machine.config:
<add verb="*" path="*.asax" type="System.Web.HttpForbiddenHandler, ... />
<add verb="*" path="*.config" type="System.Web.HttpForbiddenHandler, ... />

08-01-2006	#1 (permalink)
agaba175 Banned User Join Date: Jul 2006 Location: India Age: 29 Posts: 105	Can a user browsing my web site read my web.config or Global.asax files? Can a user browsing my web site read my web.config or Global.asax files?

08-03-2006	#2 (permalink)
Nazir Member Join Date: Jul 2006 Age: 47 Posts: 45	Re: Can a user browsing my web site read my web.config or Global.asax files? No. The <HTTPHANDLERS>section of Machine.config, which holds the master configuration settings for ASP.NET, contains entries that map ASAX files, CONFIG files, and selected other file types to an HTTP handler named HttpForbiddenHandler, which fails attempts to retrieve the associated file. You can modify it by editing Machine.config or including an section in a local Web.config file. Here are the relevant statements in Machine.config: <add verb="" path=".asax" type="System.Web.HttpForbiddenHandler, ... /> <add verb="" path=".config" type="System.Web.HttpForbiddenHandler, ... />

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Which site you use for store files and photo?	tychicus	Hosting	21	08-06-2007 07:52 AM
global warming	Geen Engel	All Things General	11	08-09-2006 03:12 PM
predefined sections in web.config	Tom Tom	.NET	0	07-11-2006 10:40 PM
How to declared the Global variables in web.config in asp.net ?	gage	.NET	3	07-10-2006 04:53 AM
Global eTalk	Craig	Marketing	4	02-01-2006 11:59 PM

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)

	All times are GMT. The time now is 04:14 AM.
	Contact Us - preCharge.Net - Archive - Privacy Statement - Top