title: ASPX to have access but direct URL not
body: <p>I have a problem finding solution to my issue.</p>
  
  <p>I am running IIS8 and building up a script in VB.NET.</p>
  
  <p>The script gives access after certain conditions to "hasaccess.aspx" with embedded PDF. The problem is that the SOURCE CODE still shows the URL so someone could potentially share that URL with person who should not have access.</p>
  
  <p>I am thinking there must be a way for allowing IIS ASPX to have access to the file (so embedding works) but not direct URL (if someone pastes it to address  bar it should give 403 or something)</p>
  
  <p>I found something about "Managing Handlers" but information was so vague that I find really hard to implement that.</p>
  
  <p>I would really appreciate your help with this.</p>