popup and timeout problem

[Dan Pavel]

Hi,

I have a little problem and I can't solve it. I have a webpage and in
the aspx i have this code:
if (exists)
Response.Write("<td align='center' bgcolor=#0033ff
onclick=\"javascript:window.open('wfpopup.aspx?ID="+workflow+"&DAY="+
j.ToString()+"','','width=250,height=180,left=20,top=120,resizable=no,st
atus=no,toolbar=no')\"&gt;><img src=\"images/blue_square.gif\" border=0
height=16 width=16></td>");
else
Response.Write("<td align='center'
bgcolor=#ffffff>&nbsp;&nbsp;&nbsp;&nbsp;</td>");
}

This will create a table with blue clickable sqares for selected days.
After clicking on the sqare, it will open a popup with some data I need.
All is fine to here. After the Session is timed out, after I click on
the blue sqare the popup will open but inside is the login page of the
application. The popup code does not have any code regarding security so
it should open normally.
When I compile step by step, after the timeout, the run will not pass
through the popup code. Please help.

Thanks in advance,
Dan

 

[Ignacio Machin \( .NET/ C# MVP \)]

Hi,

Are you using Form auth?

If so when you make a request without being auth first ( by the existence of
an ID in the request ) your request ( wfpopup.aspx ) is redirected to the
auth page


cheers,

 

[Dan Pavel]

Yes, I am using Form auth. How can I bypass this redirect to the logon
page ? In the worst case, I need that when the session is timed out,
this wfpopup.aspx page to be redirected to a simple page with the
"Session expired. Please login" text not to the logon page. How can I do
that ?

Thank you,
Dan

 

[Cathal Connolly [C# MVP]]

You can't bypass the logon, as the check happens at the application level
via the .net framework, so the redirect happens before the page is properly
accessed. You could either add the code into the page_load of the login page
to check the referrer, and popup the page accordingly, or else use a htm as
the popup(as the extension exists outside the .net framework).

Another option is to use a subfolder with it's own configuration.
web.config's work in a hierarchial tree based way, so you could have your
popup page in another directory, that contains it's own web.config, that
allows unauthenticated access to it i.e.

javascript:window.open('unauth/wfpopup.aspx....

Cathal

 

[Dan Pavel]

Hi,

I added in the Form_Load of the logon page a referrer check and
redirected to a html page containig an error message.

Thank you,
Dan