<configuration xmlns="http://schemas.microsoft.com/.NetConfiguration/v2.0">
  <connectionStrings>
    <remove name="APP" />
    <add name="APP" connectionString="Server=SERVER\SQLEXPRESS;Database=APP;Trusted_Connection=true;uid=sa;pwd=psw;" providerName="System.Data.SqlClient" />
  </connectionStrings>  
  <system.web>    
    <pages styleSheetTheme="PROVA"/>
    <customErrors mode="RemoteOnly"/>
    <compilation debug="true"/>
    <authentication mode="Forms">
      <forms loginUrl="Default.aspx" protection="Validation" timeout="300" />
    </authentication>   
    <authorization>
      <allow users="*"/>
    </authorization>
    <globalization requestEncoding="utf-8" responseEncoding="utf-8"/>
    <profile enabled="true">
      <properties>
        <add name="DataNascita" type="String"/>
      </properties>
    </profile>
    <membership defaultProvider="SqlProvider">
      <providers>
        <add name="SqlProvider" 
             type="System.Web.Security.SqlMembershipProvider" 
             connectionStringName="APP" 
             enablePasswordRetrieval="false" 
             enablePasswordReset="true" 
             requiresQuestionAndAnswer="true" 
             requiresUniqueEmail="true"  
             passwordFormat="Hashed"
             maxInvalidPasswordAttempts="5"
             minRequiredPasswordLength="6"
             minRequiredNonalphanumericCharacters="0"
        />
      </providers>
    </membership>   
        <roleManager enabled="true"/>
    <siteMap defaultProvider="XmlSiteMapProvider" enabled="true">
      <providers>
        <add name="XmlSiteMapProvider"
            description="SiteMap provider which reads in .sitemap XML files."
            type="System.Web.XmlSiteMapProvider, System.Web, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a"
            siteMapFile="web.sitemap"
            securityTrimmingEnabled="true"/>
      </providers>
    </siteMap>
  </system.web>
  <location path="Admin">
    <system.web>
      <authorization>
        <allow roles="Administrators"/>
        <deny users="*"/>
      </authorization>
    </system.web>
  </location>
</configuration>