Comments on Neil Pullinger's .NET Blog: Always Use Response.End() After FormsAuthenticatio...

Thank you its a great posting. I have programmed a...

2009-11-19T03:37:59.473-08:00

Thank you its a great posting. I have programmed asp.net since beta 1.0 and never new this, I just knew that ResponseRedirectToLoginPage did not work as expected and never uses it, creating my own rutine with a response.redirect with the apropriate querystring instead.

Microsoft should have implementet a response.end() method call by default inside the ResponseRedirectToLoginPage() method as it is what the method name suggest the method will do.

Truthfully I don't see any reson of why one would not want that behaiviour, anyone care to comment? I mean if an optional responseEnd parameter is needed?

Good stuff Neil! This is exactly what I was lookin...

2009-09-07T05:58:18.654-07:00

Good stuff Neil! This is exactly what I was looking for. It's quite an oversight on the part of the ASP.NET dev team. Thanks again!

I'd like to point out that another method, if ...

2009-07-23T09:34:30.229-07:00

I'd like to point out that another method, if you don't want to use Response.End(), is to wrap your page load logic in a IsAuthenticated() if block.

Wow! I was searching on the net for exactly this....

2009-05-13T16:49:00.000-07:00

Wow! I was searching on the net for exactly this. Once I realized what this was doing I thought "surely not" and sure enough it does! I have a feeling this is a common security hole on a lot of sites!!! Thanks for the heads up.

Thanks for the information, been driving me crazy ...

2009-05-01T05:47:00.000-07:00

Thanks for the information, been driving me crazy for two days on why the rest of the page code continued to process!!!

Neil,

Thank you so much for the Response.En...

2008-05-07T14:43:00.000-07:00

Neil,

Thank you so much for the Response.End advice. I've been developing ASP.NET apps for years and didn't notice until today that my RedirectToLoginPage wasn't stopping the current page from executing. Makes me wonder what else I don't know ;-)

Thanks for the tip. That is very scary to think th...

2007-11-06T15:41:00.000-08:00

Thanks for the tip. That is very scary to think that all the times I've used that call the rest of the page was sent to the client anyways. FormsAuthentication.RedirectToLoginPage should at least have an option to end the response immediately like Response.Redirect does.