ASP.Net Programming Question:
Can a user browsing my Web site read my Web.config or Global.asax files?
Answer:
No. The section of Machine.config, which holds the master configuration settings for ASP.NET, contains entries that map ASAX files, CONFIG files, and selected other file types to an HTTP handler named HttpForbiddenHandler, which fails attempts to retrieve the associated file. You can modify it by editing Machine.config or including an section in a local Web.config file.
| Previous Question | Next Question |
| What are different types of directives in .NET? | How do I debug an ASP.NET application that was not written with Visual Studio.NET and that does not use code-behind? |