Access to /app/etc/local.xml is not so desired since it contains your db login.
However IIS does ignore .htaccess, so you need to change the local web.config file. Continue reading Magento security on IIS
Access to /app/etc/local.xml is not so desired since it contains your db login.
However IIS does ignore .htaccess, so you need to change the local web.config file. Continue reading Magento security on IIS