Hi Zhao, Thank you for your reply. I now understand how [AlwaysAllowedUrls] works and where the query string check is still performed on the allowed Urls. To clarify, here is what I would like to achieve. For instance, I would like the following 'url+query string' to be valid: http://www.domain...

Good time period, Following a re-design of one of my sites, i had previously had /connections/ in the root folder with all the .asp files. During the redesign, all the .asp files making up the content were moved to folders from the root dir. To then link them to their respective dbs, the following line...