web.config authorization deny unauthorised
问题 I am developing a .NET for ASP.NET Web Application and am trying to deny all users who are unauthorised from accessing my application but allowing them only to the login page. Below is a snippet of the code which is inside my system.web section: <authentication mode="Forms"> <forms loginUrl="Login.aspx" timeout="60" name="APPNAME" slidingExpiration="true" /> </authentication> <authorization> <deny users="?" /> </authorization> I also have this outside to allow access to the login page: