Can a user read the Web.config or Global.asax files of any website?

No, The <HTTPHANDLERS> section of Machine.config, which holds the master configuration settings for ASP.NET, contains entries that map ASAX files, CONFIG files, and selected other file types to an HTTP handler named HttpForbiddenHandler, which fails attempts to retrieve the associated file. You can modify it by editing Machine.config or including a section in a local Web.config file.
Need Help? Contact Us.

Log in

*
*

Forgot password?

*

New User

*
*
*
*