Home/ Questions/Q 7771137
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-06-01T16:34:31+00:00

I want to ask what the difference is between the app_data folder in a

  • 0

I want to ask what the difference is between the app_data folder in a web application and in a web site .

I want to make sure that this folder is secure in web application because I put specific file in this folder which specific users only can download it.

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    Preventive Action to check the user is valid before downloading

    1. Do not give the Directory Browsing Provision in IIS.

    2. There is basically a way in which the Anonymous/Unauthorized user can Access/download your Authorized File. Example – You know the Query String Values and other user can type and download it. So, there are two ways by which you can prevent unauthorized User to download file.

      (a) Keep the Web.Config in this folder and define the Roles/Users whoever can access it.

      (b) In the Page Load, you can check the page being opened is being done by the Authorized user only.

    App_Data Folder is same for both types Web Application as well as Web Site.

    • 0