locked
Deny using DBProvider based on QueryString value RRS feed

  • Question

  • User172328402 posted

    We currently have a server which acts as a reverse proxy and rewrites any URL to an internal server name. Perfect. Works

    What we'd like to start doing though is denying access (returning a 403 Forbidden) based upon the value of a querystring. The values that we would like to allow through are in a database and I have installed the DBProvider for rewrite.

    Example

    The database has two rows - 123456 and 654321. These are two values we would allow.

    A user access our website www.mywebsite.com/mypage.aspx?ID=123456 - Allowed!
    Another user access our website www.mywebsite.com/mypage.aspx?ID=454474 - Blocked!

    Is this possible?

    Friday, April 24, 2015 7:35 AM

Answers