no access to page when passing a querystring

[Fuga]

Hi,

I have a page on my website with access granted to loggged in users (I'm using the built in asp.net membership database). This works.

however, when passing a querystring parameter in combination with that url adress, the user is denied access.

Do you guys recognize this? How do I solve it?

Thanks!

Fuga.

[MonkOFox]

Could you post your web.config and page_load for that specific page?

Justin

[Fuga]

Thanks for repying.

sure, this is the relevant config section:

  <location path="agera.aspx">
    <system.web>
      <authorization>
          <allow roles="FAB, Handläggare"/>
          <deny users="*"/>
      </authorization>
    </system.web>
  </location>

and this is the vb code, which generates a div that the user clicks on to pass the querystring:

                Me.doclist.Controls.Add(New LiteralControl("<div class=""doclist"" onclick=""javascript:window.location.href='Agera.aspx?doc=" & rw.Item("DocFileName") & "';"" onmouseover=""javascript:this.style.cursor='pointer';"">" & rw.Item("DocName") & " </div>"))

Thanks!

[MonkOFox]

Maybe htmlencode your datarow's value that you use in the querystring.
Then in the Load event on Agera.aspx, htmldecode that querystring parameter.