CODEWITHSUNDEEP
c#asp.net
Murthy
Murthy

Reputation: 1552

How to pass values in URL in c#

I am redirecting to a page changepassword, I want to pass the useremail and password in the url which I get in the current page. How can I pass it in the url. I dont want to use session or cookie. 

 Response.Redirect("ChangePassword.aspx");

Upvotes: 1

Views: 24341

Answers (5)

SWeko
SWeko

Reputation: 30912

First of all, the Response.Redirect method supports a full URL as the parameter, so you can use:

Response.Redirect("ChangePassword.aspx?Username=sweko&password=secret");

That will redirect the browser to that page, and the user will be free to inspect and modify the URL further, just the same as if he entered it manually.

There is absolutely nothing that will prevent the user to enter another user's username and there is no way that you'll be able to prevent a malicious onlooker from looking at the URL, so sending security information in the URL is a horrible, horrible idea.

Upvotes: 0

NoWar
NoWar

Reputation: 37642

Please use Session object to keep this information!!!

Have a look ASP.NET Session State Overview

Don't use 

Response.Redirect("ChangePassword.aspx?password=_543k@sdfPASS");

to send any security data!!!

Upvotes: 3

Rosmarine Popcorn
Rosmarine Popcorn

Reputation: 10967

Response.Redirect("ChangePassword.aspx?username=user&password=pass"); same as Querystring passed from Ajax.
but that's not a good idea

Upvotes: 1

Davide Piras
Davide Piras

Reputation: 44605

well you can append querystring parameters like this:

Response.Redirect("ChangePassword.aspx?test=value1&test2=value2");

surely I would not put any password in there anyway...

Upvotes: 1

Michiel van Vaardegem
Michiel van Vaardegem

Reputation: 2035

Response.Redirect("ChangePassword.aspx?MyParam=MyValue");

See: http://msdn.microsoft.com/en-us/library/t9dwyts4%28v=VS.90%29.aspx

Upvotes: 7

Related Questions