Question

I am using this code to check if the request came from a page , if not then redirect somewhere.

string referer = Request.ServerVariables["HTTP_REFERER"];
            if (string.IsNullOrEmpty(referer))
            {
                Response.Redirect("/UnauthorizedAccess.aspx");
            }

It is working , I don’t know whether it is perfect the solution.However I am checking this on load event of one of my page.How can I make it check on every request.Should I check this for all my pages.Also it is a good approach.Can anybody point me in the right direction.Any suggestion is welcome.

Answer 1

If you have logic that you would like to be run on the OnLoad of a bunch of your pages. You should probably create a BasePage that derives from Page and have the logic inside. Then all the pages you want that logic in can derive from BasePage instead of the regular Page.

Another approach can be using Master Pages

Note: After reading OPs additional comments. One thing to look out for when using a Master Page is that the Master Page’s Page_Load event happens AFTER the Content Page’s Page_Load event.
In other words the lifecycle is like this:

Master Page Init Event

Content Page Init Event

Content Page Load Event

Master Page Load Event

If your response.redirect moves the user to another page with the same master page (and same “validation” check) you might find yourself in an endless loop 🙂