Web <?xml version= "1.0" encoding= "Utf-8"?>
<configuration>
<!--application specific settings-->
<appSettings>
<add key= "ConnectionString" value= "server=localhost;uid=sa;pwd=;d atabase=store"/>
</appSettings>
<!--forms Based authentication-->
<system.web>
<!--enable Forms authentication-->
<authentication mode= "Forms" >
<forms name= "Ibuyspystoreauth" loginurl= "Login.aspx" protection= "All" path= "/"/>
</authentication>
<!--enable custom errors for the application-->
<customerrors mode= "RemoteOnly" defaultredirect= "errorpage.aspx"/>
<!--disable session state for application-->
<sessionstate mode= "Off"/>
</system.web>
<!--set Secure paths-->
<location path= "Checkout.aspx" >
<system.web>
<authorization>
<deny users= "?"/>
</authorization>
</system.web>
</location>
<location path= "Orderlist.aspx" >
<system.web>
<authorization>
<deny users= "?"/>
</authorization>
</system.web>
</location>
<location path= "Orderdetails.aspx" >
<system.web>
<authorization>
<deny users= "?"/>
</authorization>
</system.web>
</location>
</configuration>
