Security on the disk cached files

Rate this topic:

Please Register to post a reply. Another benefit of registration is the ability to subscribe to and recieve notifications of new posts.

Author

Messages

lodani dani
<50 Posts

Posts:46

02/09/2008 6:51 PM
Hello, If I'm not wrong, all the cache pages are stored as files on the disk. Can this files be reached by guessable URLs? This is not an issue if the cached pages belongs to an anonimous but I'm planning to cache some autenthicated roles as well. thanks, lodani

John Mitchell
Posts:3492

02/09/2008 10:19 PM
The disk cached files are stored with a .webinfo extension that is not accessible directly from the website. This extension is blocked by ASP.Net like web.config. You can also setup your cache folder to be outside of the web root for additional security.

Please Register to post a reply. Another benefit of registration is the ability to subscribe to and recieve notifications of new posts.