I am writing a .Net Web application to reset an AD User's password. The user
will hit the first web page, answer a few questions and if their answers are
correct then they will be directed to a web page that will ask them what
password they would like to have their ID set to. On this second page I
would like some VB.Net code to check to see that the first page invoked the
second page. I don't want someone to be able to directly type the 2nd page's
web address in IE and be able to execute the page.
Any help would be great.
In your PageLoad(), use HttpRequest.UrlReferrer (that is,
Page.Request.UrlReferrer) to check the the referring page was the URL of
your 1st page.
However, I'm not too sure how secure this would be (i.e. it may be possible
to spoof the request).
>I am writing a .Net Web application to reset an AD User's password. The
>user
[quoted text clipped - 9 lines]
>
> Any help would be great.
Brian - 31 Aug 2005 15:22 GMT
Thanks that will get me started. Do you know if a secure way to make sure
that my first web page is the only one that can execute my second web page?
> In your PageLoad(), use HttpRequest.UrlReferrer (that is,
> Page.Request.UrlReferrer) to check the the referring page was the URL of
[quoted text clipped - 16 lines]
> >
> > Any help would be great.