Was this page helpful?
Your feedback about this content is important. Let us know what you think.
Additional feedback?
1500 characters remaining
GetRedirectUrl Method

FormsAuthentication.GetRedirectUrl Method

Returns the redirect URL for the original request that caused the redirect to the login page.

Namespace: System.Web.Security
Assembly: System.Web (in system.web.dll)

public:
static String^ GetRedirectUrl (
	String^ userName, 
	bool createPersistentCookie
)
public static String GetRedirectUrl (
	String userName, 
	boolean createPersistentCookie
)
public static function GetRedirectUrl (
	userName : String, 
	createPersistentCookie : boolean
) : String
Not applicable.

Parameters

userName

The name of the authenticated user.

createPersistentCookie

This parameter is ignored.

Return Value

A string that contains the redirect URL.

You can use this method when you want to perform the redirect in your application code instead of using the RedirectFromLoginPage method.

The GetRedirectUrl method returns the URL specified in the query string using the ReturnURL variable name. For example, in the URL http://www.contoso.com/login.aspx?ReturnUrl=caller.aspx, the GetRedirectUrl method returns the return URL caller.aspx. If the ReturnURL variable does not exist, the GetRedirectUrl method returns the URL in the DefaultUrl property.

ASP.NET automatically adds the return URL when the browser is redirected to the login page.

By default, the ReturnUrl variable must refer to a page within the current application. If ReturnUrl refers to a page in a different application or on a different server, the GetRedirectUrl methods returns the URL in the DefaultUrl property. If you want to allow the return URL to refer to a page outside the current application, you must set the EnableCrossAppRedirects property to true using the enableCrossAppRedirects attribute of the forms configuration element.

Security noteSecurity Note:

Setting the EnableCrossAppRedirects property to true to allow cross-application redirects is a potential security threat. When cross-application redirects are allowed, your site is vulnerable to malicious Web sites that use your login page to convince your Web site users that they are using a secure page on your site. To improve security when using cross-application redirects, you should override the GetRedirectUrl method to allow redirects only to approved Web sites.

The following code example redirects authenticated users to the URL returned from the GetRedirectUrl method.

Security noteSecurity Note:

This example contains a text box that accepts user input, which is a potential security threat. By default, ASP.NET Web pages validate that user input does not include script or HTML elements. For more information, see Script Exploits Overview (Visual Studio).

No code example is currently available or this language may not be supported.

Windows 98, Windows Server 2000 SP4, Windows Server 2003, Windows XP Media Center Edition, Windows XP Professional x64 Edition, Windows XP SP2, Windows XP Starter Edition

The Microsoft .NET Framework 3.0 is supported on Windows Vista, Microsoft Windows XP SP2, and Windows Server 2003 SP1.

.NET Framework

Supported in: 3.0, 2.0, 1.1, 1.0

Community Additions

ADD
Show:
© 2015 Microsoft