Prevent file browsing

2019-09-05 22:34发布

问题:

I have two questions as below:

First,I provided the file download functionality to the user, but when user copies the URL and paste in another browser, I do not want the download to get started start, instead I want this to be started only when user navigates from link in the application.

Second how to prevent file browsing in asp.net? I tried

<directoryBrowse enabled="false"/>

in web.config. but was not useful.

回答1:

got the solution,

Option 1.you can add the web.config file to the directory in which the file you want to restrict the access exist and add following lines to the web.config

<configuration>
  <system.web>
   <authorization>
    <deny users="?"/>
   </authorization>
  </system.web>
</configuration>  

OR

Option 2. You can add following lines to the existing root web.config.

<configuration>
<location path="DirectoryName">
    <system.web>
        <authorization>
            <deny users="?"/> <!-- Denies Anonymous Users -->
        </authorization>
    </system.web>
</location>
</configuration>