server.transfer and forms authentication

[java.equals(cool)]

hi there,

my app needs to retrieve a value from a previously viewed page. The user
moves between pages on the site with the server.transfer method doing the
legwork. This works fine.

The problem comes from getting values from a particular page; which does not
use the server.transfer command. This page is for logging in, and is the page
a user is redirected to when accessing the site. They are redirected there by
the web.config file which uses forms authentication. As the logon page uses
the line

FormsAuthentica tion.RedirectFr omLoginPage(str ing userName, bool
createPersisten tCookie);

to redirect the user; the parameters of the logon screen are not saved from
the class meaning i cant access them. What would be a sensible way to get
round this ? I need it passed securely as i want the password; so posting it
in the url is out.

I thought to authenticate the user then direct them to a specific welcome
page. How/Can this be done whilst satisfying the web.config file for
authenticating a user.

Any help greatly appreciated,

H

[Grant Merwitz]

Instead of using:
FormsAuthentica tion.RedirectFr omLoginPage
(which i believe is a Response.Redire ct)

Rather use
FormsAuthentica tion.SetAuthCoo kie

you can then call Server.Transfer yourself

HTH

"java.equals(co ol)" <ja************ @discussions.mi crosoft.com> wrote in
message news:82******** *************** ***********@mic rosoft.com...

hi there,

my app needs to retrieve a value from a previously viewed page. The user
moves between pages on the site with the server.transfer method doing the
legwork. This works fine.

The problem comes from getting values from a particular page; which does
not
use the server.transfer command. This page is for logging in, and is the
page
a user is redirected to when accessing the site. They are redirected there
by
the web.config file which uses forms authentication. As the logon page
uses
the line

FormsAuthentica tion.RedirectFr omLoginPage(str ing userName, bool
createPersisten tCookie);

to redirect the user; the parameters of the logon screen are not saved
from
the class meaning i cant access them. What would be a sensible way to get
round this ? I need it passed securely as i want the password; so posting
it
in the url is out.

I thought to authenticate the user then direct them to a specific welcome
page. How/Can this be done whilst satisfying the web.config file for
authenticating a user.

Any help greatly appreciated,

H

[Joey]

You can stick whatever you want in the Session state and then retrieve
it later from any page in your app...

To store:

this.Session["MyStoredVa lue"] = "Hello World!";

To retrieve:

string HelloWorld = this.Session["MyStoredVa lue"].ToString();

[java.equals(cool)]

This method is definately the easiest. But is the method secure ? are the
values hidden ? if not can i encrypt them ?

"Joey" wrote:

You can stick whatever you want in the Session state and then retrieve
it later from any page in your app...

To store:

this.Session["MyStoredVa lue"] = "Hello World!";

To retrieve:

string HelloWorld = this.Session["MyStoredVa lue"].ToString();

[Grant Merwitz]

You can most definately encrypt them, and if they are a security risk you
should!

You can also store values you want into a FormAuthenticat ionTicket, which
you can use the FormsAuthentica tion encryption to encrypt
(that is if you choose not to use sessions)
"java.equals(co ol)" <ja************ @discussions.mi crosoft.com> wrote in
message news:4C******** *************** ***********@mic rosoft.com...

This method is definately the easiest. But is the method secure ? are the
values hidden ? if not can i encrypt them ?

"Joey" wrote:

You can stick whatever you want in the Session state and then retrieve
it later from any page in your app...

To store:

this.Session["MyStoredVa lue"] = "Hello World!";

To retrieve:

string HelloWorld = this.Session["MyStoredVa lue"].ToString();

[java.equals(cool)]

great. thanks very much guys

"Grant Merwitz" wrote:

You can most definately encrypt them, and if they are a security risk you
should!

You can also store values you want into a FormAuthenticat ionTicket, which
you can use the FormsAuthentica tion encryption to encrypt
(that is if you choose not to use sessions)
"java.equals(co ol)" <ja************ @discussions.mi crosoft.com> wrote in
message news:4C******** *************** ***********@mic rosoft.com...

This method is definately the easiest. But is the method secure ? are the
values hidden ? if not can i encrypt them ?

"Joey" wrote:

You can stick whatever you want in the Session state and then retrieve
it later from any page in your app...

To store:

this.Session["MyStoredVa lue"] = "Hello World!";

To retrieve:

string HelloWorld = this.Session["MyStoredVa lue"].ToString();