Question

We’re modifying an existing ASP.NET application. We added a Terms and Conditions page with an “Accept” button that stores that choice in the user’s account data. We want to prevent the user from accessing any page when the user has not accepted the Terms and Conditions.

I think we want to do this by looking up the “accepted terms” value upon login and storing it in the session. Then we need to intercept every request and check for that session value. (If it’s not there, we redirect the user to the Terms and Conditions page.)

Is the PreRequestHandlerExecute method the right place to put this check? This method also gets called on requests for stylesheets and images, so it doesn’t seem like it was intended for this purpose.

Answer 1

PreRequestHandlerExecute is the easiest handler that I’ve found so far. I’ll typically use it when I need to assess the value of Session variables before every request, which is similar to what you’re doing.

protected void Application_PreRequestHandlerExecute(Object sender, EventArgs e) {
  if (Context.Handler is IRequiresSessionState || Context.Handler is IReadOnlySessionState) {
    // Business Logic Here
  }
}