copy and pste url

[kmanisha]

hi

i have problem for which i have been struggling fro last two days
i hope u can slove this

consider a scenario

1> user login using his userid and password
2> he get his required page
3> user copy the url
4> user logout
5> he paste the url
6> he is getting page without any validations

i am using formsauthetication.signout
session.abdoan
session.clear

i have written validation code on page_init event
which does not fire
when u copy and paste url

i think i am able to explain my problem

please help me its urgent

thanks

[mmetzger]

Do you:

1) Have a <location> configuration defined in the web.config file for what users / roles can have access to said directory / file / resource?

2) If said resource is an .as?x page, does the Page_Load handler have a check to see if user is authenticated / in the proper role / etc? (Only 1 or 2 is required - though both can be used in combination)

3) If this is a different file type (html, jpg, etc) you need to make sure the data type is handled by the asp.net processing engine, otherwise IIS doesn't apply any of the security given by asp.net.

In other words - please post your web.config (and the version of asp.net you're using) and we can try to help you out.