title: How do I securely reference ASP classic include files outside of web root?
body: <p>I'd like to be able to place all my ASP Classic include files outside of the web root. This assures no include files can be called directly via the URL. </p>
  
  <p>What is the best way to accomplish this?</p>
  
  <p>I know I can use a <a href="http://msdn.microsoft.com/en-us/library/zwk103ab.aspx" rel="nofollow noreferrer">virtual directory</a> to reference an includes folder outside of web root, but doesn't that still allow direct access to that directory via the URL? Perhaps I'm misunderstanding the nature of virtual directories.</p>