Restriction to access the aspx page directly.

astrovirgin

Hi, I want to restrict the user to access the page directly through giving the address in the Address Bar of the browser. For Example, I have a page named:

http://localhost/ISTSMail/Compose.aspx

. Now I can access this page directly by giving the address in the adress bar but I want to restrict user to access this page only through a particular link not just by giving the address. How it will be possible. Please help.

J4amieC

Check the Request.UrlReferer property on Compose.aspx and ensure that they came from where you expect them to have come from. Not particularly good security, but does what you asked!

Abhishek Sur

I think you can check your authentication token which you place on login to session. And each page will check if you are authenticated or not. If you are out of session, generate an error and handle it to go to some errorpage from Global.asx For Example : Your page Compose.aspx will check Session["Auth_token"]. If true show the page, otherwise dont.... You can also use Application_BeginRequest event of Global.asax to implement this logic, because it will be called on every page call... :rose:

Abhishek Sur

NikoTanghe

but watch out, the URL referer can be faked rather easy...

<< Nearly all men can stand adversity, but if you want to test a man's character, give him power. >>