Skip to main content
Participating Frequently
September 28, 2009
Question

Securing help .HTM pages

  • September 28, 2009
  • 1 reply
  • 1096 views

We have RH8-HTML.

We have a custom built application that is based on .aspx pages, which I've written the help for in RH8.

If you try to pull up a particular .aspx page in the custom built application without being logged into the system, the system requires you to log in.

The help pages generated by the HTML Help are accessible if you put in the URL into the web browser's address bar without being challenged for login credentials.  This is true whether or not you are currently logged into the custom build application or not.  I have the generated help files sitting on the web server as a sub directory of the custom built application, along side any of the other folders that hold the internals of the custom built application.

Is there a way to force the help pages to act like the .aspx pages by requiring log in credentials to the site to be used prior to being able to see the help pages?  We really only want to the authenticated users of the custom built application to see the help, as opposed to anybody on the planet that might guess what the help pages are named.

This topic has been closed for replies.

1 reply

Captiv8r
Legend
September 29, 2009

Hi there

I beleive this is possible. I think you need to ask your Web admins about securing the folder where you place the WebHelp so that folks are required to log in to view them.

Cheers... Rick

Helpful and Handy Links

RoboHelp Wish Form/Bug Reporting Form

Begin learning RoboHelp HTML 7 or 8 within the day - $24.95!

Adobe Certified RoboHelp HTML Training

SorcerStone Blog

RoboHelp eBooks

diamondesAuthor
Participating Frequently
September 29, 2009

I think I need to add a little more: the custom built application relies on

ASP.NET forms authentication to grant access to the aspx pages rendered by

the custom built application. The .htm pages of the help don't seem to have

this ability. You can simply get to them. Is there a way to hide them

behind a .aspx page that IS controlled by form authentication or is there a

way to configure ASP.NET in the IIS snap in to secure the .htm pages so that

forms authentication is required to access the .htm pages?