Web.config is an XML file. The outer tag is <configuration>. Several tags can go inside the <configuration> statement. IBuySpy Store uses <appSettings>, <authentication>, <customErrors>, <sessionState>, and <authorization>. The <appSettings> statement defines keys for the application. You can define arbitrary keys in your JScript .NET code and set their values in Web.config. IBuySpy Store uses the connectionString key, and this is how its value is set:

  <appSettings>
     <add key="ConnectionString" 
          value="server=HAW2L1800\NetSDK;Trusted_Connection=true;database=StoreDOCJS" />
  </appSettings>

  <authentication mode="Forms">
     <forms name="IBuySpyStoreAuth" loginUrl="login.aspx" protection="All" path="/" />
  </authentication>

  <customErrors mode="RemoteOnly" defaultRedirect="ErrorPage.aspx" />

  <sessionState mode="Off" />

  <system.web>
    <authentication mode="Forms">
      <forms name="IBuySpyStoreAuth" loginUrl="login.aspx" protection="All" path="/" />
    </authentication>
    <customErrors mode="RemoteOnly" defaultRedirect="ErrorPage.aspx" />
    <sessionState mode="Off" />
  </system.web>

  <location path="Checkout.aspx">
    <system.web>
      <authorization>
        <deny users="?" />
      </authorization>
    </system.web>
  </location>

  <?xml version="1.0" encoding="utf-8" ?>
  <configuration>
    <!-- application specific settings -->
    <appSettings>
      <add key="ConnectionString" 
         value="server=HAW2L1800\NetSDK;Trusted_Connection=true;database=StoreDOCJS" />
    </appSettings>
    <!-- forms based authentication -->
    <system.web>
      <!-- enable Forms authentication -->
      <authentication mode="Forms">
        <forms name="IBuySpyStoreAuth" loginUrl="login.aspx" protection="All" path="/" />
      </authentication>
      <!-- enable custom errors for the application -->
      <customErrors mode="RemoteOnly" defaultRedirect="ErrorPage.aspx" />
      <!-- disable session state for application -->
      <sessionState mode="Off" />
    </system.web>
      <!-- set secure paths -->
    <location path="Checkout.aspx">
      <system.web>
        <authorization>
          <deny users="?" />
        </authorization>
      </system.web>
    </location>
    <location path="OrderList.aspx">
      <system.web>
        <authorization>
          <deny users="?" />
        </authorization>
      </system.web>
    </location>
    <location path="OrderDetails.aspx">
      <system.web>
        <authorization>
          <deny users="?" />
        </authorization>
      </system.web>
    </location>
  </configuration>

People who read this tip also read these tips:

• Merging Objects
• Finding a File's Parent Folder
• Using the System.Console Class
• Non-Persistent Related Menus
• Node Types You Can Add to the XML Tree