Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

Password-Protecting Elmah.axd file

I've succesfully set up Elmah in my web project and I can access the crash log at http://www.myserver.com/Elmah.axd .

The only question is how to secure this URL so that only my colleagues (as opposed to anonymous users and users who are logged in, but not part of my team) can access it. ASP.NET forms authentication is already set up on the system.

Thanks,

Adrian

like image 748
Adrian Grigore Avatar asked Jan 26 '10 19:01

Adrian Grigore


People also ask

What is ELMAH axd?

Description. ELMAH (Error Logging Modules and Handlers) is an application-wide error logging facility that is completely pluggable. It can be dynamically added to a running ASP.NET web application, or even all ASP.NET web applications on a machine, without any need for re-compilation or re-deployment.

What is ELMAH logging?

In this article ELMAH is a free, open source error logging library that includes features like error filtering and the ability to view the error log from a web page, as an RSS feed, or to download it as a comma-delimited file.


2 Answers

Phil Haack had a blog post about this: http://haacked.com/archive/2007/07/24/securely-implement-elmah-for-plug-and-play-error-logging.aspx

like image 73
Don Avatar answered Sep 28 '22 00:09

Don


If you have roles setup, you could use the web.config file to restrict access to that file only to people within a specified role.

like image 26
Nick DeVore Avatar answered Sep 28 '22 01:09

Nick DeVore