Trying to deny access to .php pages.

[fagan]

I have an Intranet on a Windows/IIS server. I have created a folder which contains .php files that the normal user is not allowed to see (HR stuff). I can & have thought about writing a login page, but I'd rather not subject these users to that. Don't ask. Anyway, I can deny access to individual .html pages, but when I do the same with a .php page, it's as if they have full access. If they type in the URL in the address line, it opens.

Any ideas?

Thanks.

[Nixon]

Could you use ht.access protection?

[fagan]

I'm not too sure about .htaccess, but I think it works with IIS. But, I guess you triggered something in my weak little brain. I was denying access via Windows Explorer, with Anonymous access allowed! DUH! I removed that, & it works like I wanted.

Thanks much for the assist.