Classic asp not publicly available - asp.net

Question

I need to call a classic asp page from .net, because I need the functionality of the classic asp page within my .net app.
The only way I know how to do that at the moment is like this :
MeetingCentres.Services.ClassicWhyGo.file_get_contents("http://someurl.asp?inputValue=£$%$£"%$£"%$£%)
public static string file_get_contents(string fileName)
{
string sContents = string.Empty;
if (fileName.ToLower().IndexOf("http:") > -1)
{ // URL
System.Net.WebClient wc = new System.Net.WebClient();
byte[] response = wc.DownloadData(fileName);
sContents = System.Text.Encoding.ASCII.GetString(response);
}
else
{
// Regular Filename
System.IO.StreamReader sr = new System.IO.StreamReader(fileName);
sContents = sr.ReadToEnd();
sr.Close();
}
return sContents;
}
...but this means that the classic asp page is accessed over http and hence publicly available.
How ever I need to protect this page somehow as sensitive information is returned.
I would prefer to not have this asp page publicly available.
In IIS there doesn't seem to be the ability to make the page available only above the website root, as far as I know?
Otherwise if it must be public was thinking that I may be able to check the ip address of the calling.net app and make sure that it is on the same server.
Is there a better way to do this? or would the above be safe..?

Answer 1

You are able to modify the .asp page?
Do some tests like:
Check if the IP address are the same:
<%
if Request.ServerVariables("REMOTE_ADDR") = "127.0.0.1" then
'Do your stuff
end if
%>
Create a Cookie, store a encoded key and test it and only show the data if the value equals the key.
<%
Response.Cookies("key")=encodedKey
%>
Test the cookie
<%
if Decode(Response.Cookies("key")) = decodedKey then
'Do your stuff
end if
%>
This are just simples ideas.