Prevent security bypass

From: Chris Neil <Chris.Neil(at)abs-ltd.com>
Date: Tue Feb 04 2003 - 11:59:41 EST

I am new to this mailing list and so hope this conforms to the guidelines as I read them.

How do people address the issue of non-authenticated users requesting html pages directly from a site without logging in?

FYI. This is an IIS server. Our asp pages check the user is logged in, but with html pages we cannot.
My only idea so far is to convert all our html pages to asp. Is there anything less drastic?

Chris Neil
  Security Officer
  Chris.Neil@abs-ltd.com

---

ABS
  Tel: +44 (0) 1993 771221
  Fax: +44 (0) 1993 775081

---

Received on Tue Feb 4 12:13:33 2003