Asp.net serving statics files

Question

I have an application in mvc3 (Asp.net 4.0, dotnet 4.0), running at iis8 (but also running at iis 7 and iis 7.5).

Inside the application I have a folder called /dados, example localhost/minhaapp/dados.

My clients save HTML files inside this folder, and these HTML files are accessed by the system done in mvc3.

But users are accessing the files directly through the browser URL, example localhost/minhaapp/dados/relatorio1.html, instead access via an internal system option made in mvc3.

• Block access via GET method of the HTML files in the folder /dados?

But I want the system done in mvc3 to be able to access these files via POST method. This is not the safest method, there must be many other possibilities, but if you can do that you’d be fine.

I tried various shapes, rewrite, modules, urlmapping, mvc controler, etc, but none of these captures the browser request for static files. I know that static archive are served directly by iis.

• But there is some way Asp.net can intercept static file requests?

• If not possible via Asp.net, have some configuration that works in us Iss 8, 7.5 r 7?

I can not change to another folder, or save the files otherwise, IE, by internal issues (internal policies, already being so and very widespread and used by multiple clients), the form and location as the files are saved, CANNOT BE CHANGED.

Answer 1

You inform the ISS that every request must go through it. IIS does not apply permission on static files.

In his Web.config put the following code:

<configuration>
    ...
    <system.webServer>
        <modules runAllManagedModulesForAllRequests="true" />
    </system.webServer>
    ...
</configuration>

Answer 2

I managed to make it work, I put runAllManagedModulesForAllRequests="true", I changed the application pool to integrated mode, and I put the Begingrequest method in global.asax, I restarted the application, and now it’s capturing all the requests.

Answer 3

As I have answered here, this is the way incorrect to make static files available in your application.

Block access via GET method of HTML files from the /data folder?

Yes, creating in your Controller a method Index to prevent access to the root, or else a file index.html emptiness.

But there is some way Asp.net can intercept (sic) requests for static files (sic)?

It has. You just need to make a method in your Controller return a FileResult.

Additionally, it is good to set a route that always redirects to Index, in case your user tries to access the file directly:

App_start/Routeconfig.Cs

routes.MapRoute(
            name: "Dados",
            url: "dados/{id}",
            defaults: new { controller = "Dados", action = "Index", id = UrlParameter.Optional }
        );