Allright, pretty much every page of mine has a function that checks if the user is logged in. It also checks if the user has the required access.

Now, what is the best way to return the user to a page if they get redirected to the unauthorized.asp page?

For example:
John wants to access admin.asp but is not logged in and is redirected to unauthroized.asp

Should I just be passing in the URL through a Query String? Or is this not a good way to do it.