Hi Guys,

I need to restrict access to all files within a particular directory...including image and jpeg files.

The username's and passwords are stored in a SQL database. Restricting access to .aspx files is easy, but I'm not sure how I should restrict access to the directory.

Any thoughts?

Thanks in advance for your help!

Firstly, store the files in a directory that isn't accessable from the web.

You can then write ASPX pages that firstly handle the authentication, and then load the file and write it out directly to the response stream.

You can do it by placing a web.config file in that folder restricting access to all contents of it and any children folders (unless you place another web.config file further down the tree).

There's a tutorial here that should help you out. It explains how to use forms authentication and even shows how to use usernames and passwords from a database through SQL.