Protect the XML configuration file without direct access to

xml| Access

Some programs, the configuration file is written in the XML file, this has some benefits, but for sensitive configuration, such as access to passwords, etc., or do not do in the XML configuration good.

If you have already used an XML configuration file and do not want to be accessed directly by others, you can use the following 2 methods.

[1]. Adopt A method of taking over IIS to host XML files.

This method is commonly used in processing pictures of the program, such as to protect the picture resources in the station is not authorized users to access, you can do so, take over the Jpeg,jpg file access request processing, to access the picture and access to the same page can control the rights of visitors.

[2]. Modify Web.config configuration

To add an XML map to C:\WINNT\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll in IIS

Then add the following nodes to the Weg.config

<add verb= "*" path= "*.xml" type= "System.Web.HttpNotFoundHandler"/>
When accessing an XML file directly, the server returns a 404 (file not found) error