ansaurus

Question

Is it possible to send a user back a page after login?

Answer 1

+1 A:

When your POST handler for the comment button decides it needs a login, have it forward to the login page after setting up a request attribute that holds the original URL of the comment page. The login page should drop that URL into a hidden form parameter. WHen the login action completes successfully, it can just forward back to that original page's URL.

Pointy 2010-02-09 14:15:42

wouldnt i lose the post data? wouldnt the comment box be empty?

acidzombie24 2010-02-09 14:43:52

Well, you could stash that somewhere too, if you wanted. Basically what we're saying is that your server could "package up" the action, stick it someplace where it can find it again later, and then after login carry out the original POST.

Pointy 2010-02-09 14:53:06

But then i could process the data right away and my question is about being lazy and not converting/holding that data.

acidzombie24 2010-02-09 15:17:46

No, you most certainly can't process the data right away, because the user hasn't authenticated yet. (Unless by "right away" you mean "right after the user authenticates.) If you don't want to stash the form parameters, nothing's going to do the work for you.

Pointy 2010-02-09 19:08:56

Answer 2

+1 A:

When you redirect to the login page, send a "redirectUrl" query string parameter containing the URL you want to return to. On the login page, read this query string and react accordingly...

' Going to login page
Dim Redir As String = HttpUtility.UrlEncode("~/Summary.aspx?test=1")
Response.Redirect("~/Login.aspx?redirectUrl=" & Redir)

' On login page, after successful login
Dim Redir As String = "~/Default.aspx"
If Not String.IsNullOrEmpty(Request.QueryString("redirectUrl"))
    Redir = HttpUtility.UrlDecode(Request.QueryString("redirectUrl"))
End If
Response.Redirect(Redir)

Josh Stodola 2010-02-09 14:16:25

StackOverflow syntax highlighting is **worthless**

Josh Stodola 2010-02-09 14:18:59

You might want to check the redirectUrl against a regular expression to make sure it's not leaving your site. Otherwise you're enabling a pretty strong phishing attack.

Neall 2010-02-09 14:28:14

@Neall when I do it in my site I only allow relative URLs, so attempts to redirect to http://phishers.net/hackme would just fail. Probably nice to check with a regex anyway.

Pointy 2010-02-09 14:29:40

wouldnt i lose the post data? wouldnt the comment box be empty?

acidzombie24 2010-02-09 14:43:27

Naturally, yes, because HTTP is stateless. You can persist that information with query strings as well, but it would probably be more suited for a session variable or cookie.

Josh Stodola 2010-02-09 15:12:14

But then i could process the data right away and my question is about being lazy and not converting/holding that data.

acidzombie24 2010-02-09 15:16:52

That's not how HTTP works. Session state *is* the lazy way out!

Josh Stodola 2010-02-09 16:01:58

Answer 3

+1 A:

What are you trying to do this in. A header redirect in the code would be the easiest way to go to the right page and preserve and post information. Otherwise you can use the history.back() in javascript but I think the redirector in the header is probably a safer bet.

Mech Software 2010-02-09 14:16:36

acidzombie24 2010-02-09 15:18:15

`history.back(val)` seems to only go back once no matter what value i give it :(

acidzombie24 2010-02-09 15:51:26

did you try like -3 instead of positive integers?

Mech Software 2010-02-10 20:34:36

Answer 4

A:

<script>history.go(-2)</script>

acidzombie24 2010-02-09 15:50:48

ansaurus

tags:

views:

answers:

Is it possible to send a user back a page after login?

related questions