Elmah Security
Nuget packages make adding Elmah to your project a breeze, but don’t forget to add some security to it’s visibility.
If you are using a ASP.Net based role provider, you can add the following settings to your web.config so that only a specific role can see elmah.axd
<location path="elmah.axd">
<system.web>
<authorization>
<allow roles="admin" />
<deny users="*" />
</authorization>
</system.web>
</location>
If the users is in the admin role, it will allow him, otherwise it’s a denial.
Don’t forget to allow remote access, so that you can see the log from around the world ;)
<elmah>
<security allowRemoteAccess="1" />
<errorLog type="Elmah.SqlErrorLog, Elmah" connectionStringName="Elmah.ErrorLog" />
</elmah>