Direct user to correct page upon login...help

[Culley]

I've created a secure login site. Everything works fine except for one thing... the redirect.

I want to redirect users to the correct page they are accessing (say they're just clicking a link they've bookmarked to a particular page in the secure site) rather than forcing them to navigate in from a default "login successful" page.

In each secure page, I have this include file:

<%
if Session("valid") = "" Then
Response.Redirect ("login_new.asp?r=" & Server.URLEncode(Request.ServerVariables("URL") & Request.Querystring))
end if
Session.Timeout=120
%>

My login script looks like this:

<form name="login" method="POST" action="verify_new.asp">
<p>Username:
<input type="text" name="UserName">
</p>
<p>Password:
<input type="password" name="Password">
</p>
<p><input type="hidden" name="redirect" value="<%=Request.Querystring("r")%>">
<input type="submit" name="Submit" value="Submit">
</p>
</form>

My verify page looks like this:

<%
dim username, password, sRedirect

sRedirect = Request.Form("redirect")
If sRedirect = "" then
sRedirect = "default.asp"
end if

...(lots of code)...

' if both username and pass are valid, create session ID
if Session("Valid") = Request("username") then
response.redirect sRedirect
end if
%>

If I create a url like this:

http://www.mywebsite.com/youarehere.asp,

everything functions just fine. However, if I create a url like this:

http://www.mywebsite.com/inthisfolder/youarehere.asp

the script always returns a page cannot be found error.

I've looked through my code, but I don't see that I've coded a bum link.

The error url returned looks like this:

http://www.mywesite.com/login_new.asp?r=/folder/youarehere.asp

And, it's a simple 404 error.

I suspect it has something to do with how I create the stored url in this line:
Response.Redirect ("login_new.asp?r=" & Server.URLEncode(Request.ServerVariables("URL") & Request.Querystring))

Any thoughts or suggestions?

Thanks,

Culley

 

[kss444]

Try urlencode to encode your querystring

 

[Culley]

I believe I already have it scripted that way:

Response.Redirect ("login_new.asp?r=" & Server.URLEncode(Request.ServerVariables("URL") & Request.Querystring))

Or is that not where you meant?

 

[Culley]

Okay, I'm dumb, I figured it out.

I just spelled out the full url to the login_new.asp path.