ASP login timeout and Form data...

[dnagel]

I have a session timing out after 10 minutes. If the user clicks a
submit button to post some form data after the timeout has expired, they
are redirected to a login page...

Whats the standard practice for discovering what page they were
headed to and how can I make sure that the form data is posted to that
page so that no data is lost???

My assumption here is that the mechanism i'm using to redirect the user
to the login page, needs to pass the original destination as well as the
form data to the Login Form, and then the login form, once a proper
authentication is performed, would redirect to the original destination
allowing me to process the form data... ???

Am I even close; Is there any example of this process anywhere?
TIA,

D.

[Al Reid]

I do the same thing on my web site. It has been a while since I looked at the code.

I believe that I do a redirect to the login page and then get the Request.ServerVariables ("HTTP_REFERER"). After authentication, I
navigate using http_referer.

Again, it has been a while and I don't have access to the source from my current location.

--
Al Reid

"It ain't what you don't know that gets you into trouble. It's what you know\\for sure that just ain't so." --- Mark Twain
"dnagel" <NO***********@hotmail.com> wrote in message news:uY**************@TK2MSFTNGP10.phx.gbl...

I have a session timing out after 10 minutes. If the user clicks a
submit button to post some form data after the timeout has expired, they
are redirected to a login page...

Whats the standard practice for discovering what page they were
headed to and how can I make sure that the form data is posted to that
page so that no data is lost???

My assumption here is that the mechanism i'm using to redirect the user
to the login page, needs to pass the original destination as well as the
form data to the Login Form, and then the login form, once a proper
authentication is performed, would redirect to the original destination
allowing me to process the form data... ???

Am I even close; Is there any example of this process anywhere?
TIA,

D.

[dnagel]

Al Reid wrote:

I do the same thing on my web site. It has been a while since I looked at the code.

I believe that I do a redirect to the login page and then get the Request.ServerVariables ("HTTP_REFERER"). After authentication, I
navigate using http_referer.

Again, it has been a while and I don't have access to the source from my current location.

Awesome start... If anyone (or yourself Al) knows how to handle the
posted data in a similar manner (one that does not require recoding all
the other pages involved... just the login page would be nice) I'd be
ecstatic!

tia,

D.

[Al Reid]

D.

I use the "GET" rather than "POST" so that the Request.ServerVariables
("HTTP_REFERER") contains everything I need to handle the form data after
re-authentication. For some reason, I was storing that in a Session
variable and then redirecting to that link after login is completed.

I don't pretend to be a web wizard. so my approach is probably brute force,
but it seems to work. I am not sure how to handle it if you use the Post
method.

I hope this is of some help.

--
Al Reid
"dnagel" <NO***********@hotmail.com> wrote in message
news:%2****************@tk2msftngp13.phx.gbl...

Al Reid wrote:

I do the same thing on my web site. It has been a while since I looked at the code.
I believe that I do a redirect to the login page and then get the Request.ServerVariables ("HTTP_REFERER"). After authentication, I navigate using http_referer.

Again, it has been a while and I don't have access to the source from my current location.

Awesome start... If anyone (or yourself Al) knows how to handle the
posted data in a similar manner (one that does not require recoding all
the other pages involved... just the login page would be nice) I'd be
ecstatic!

tia,

D.