How to restict access to a paricular folder in asp .net

Question

I have a subdirectory in my root folder by the name files. I want to deny direct access to files under this directory. However my application can read and write to this directory programatically.

Answer 1

If possible try to locate the files under the App_Data folder, which is intended as a store for data files that are used by the web application but not served directly to the users.

Answer 2

in web.config, you can set up authorisation on the sub-directory

   <location path="name of subdirectory">
      <system.web>
         <authorization>
            <deny users="*"/>
         </authorization>
      </system.web>
   </location>

As Fredrik points out, the App_Data folder may be a better place to put these files. What type of files are they?

Answer 3

Add to your web.config section

   <location path="YourPath">
        <system.web>
            <authorization>
                <deny users="*" />
            </authorization>
        </system.web>
    </location>

Answer 4

Thanks for your comment guys. The web.config trick not working for me. I have used bin folder and it is giving satisfactory result.