Home/ Questions/Q 8185025
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-06-07T01:42:15+00:00

My Register Page is only available to authenticated users, so anyone typing http://localhost:52874/register.aspx will

  • 0

My Register Page is only available to authenticated users, so anyone typing http://localhost:52874/register.aspx will not be able to get to it.

But I have a link to it from the login page, and when clicked it DOES go to the register page without auth using Server.Transfer("Register.aspx", false);

Now that is something that I like, it means it can only be gotten to from the Login.aspx page, which is good.

But, when I press the Submit button on the register page (after the transfer from login.aspx), it puts me back instantly to login.aspx without any processing.

Then I have to add :

  <location path="Register.aspx">
    <system.web>
      <authorization>
        <allow users="?" />
      </authorization>
    </system.web>
  </location>

To the web config to allow it to work, which means now its accessible by url. So why this behaviour, why allow me to go to it using Server.Tranfer yet not let me process the button click?

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    It’s because Server.Transfer transfers processing of the current request to a different page. This happens after the check to see if you have access to the requested page. I.e. when using Server.Transfer the request was for a page that you have access to, however you circumvented the security by passing on processing of that page to the page that you do not have access to.

    Check out Server.Transfer Vs. Response.Redirect

    • 0