hide Login / Sign out url redirect ?

This forum is only for questions or discussions about working with the mojoPortal source code in Visual Studio, obtaining the source code from the repository, developing custom features, etc. If your question is not along these lines this is not the right forum. Please try to post your question in the appropriate forum.

Please do not post questions about design, CSS, or skinning here. Use the Help With Skins Forum for those questions.

This forum is for discussing mojoPortal development

This forum is only for questions or discussions about working with the mojoPortal source code in Visual Studio, obtaining the source code from the repository, developing custom features, etc. If your question is not along these lines this is not the right forum. Please try to post your question in the appropriate forum.

You can monitor commits to the repository from this page. We also recommend developers to subscribe to email notifications in the developer forum as occasionally important things are announced.

Before posting questions here you might want to review the developer documentation.

Do not post questions about design, CSS, or skinning here. Use the Help With Skins Forum for those questions.
This thread is closed to new posts. You must sign in to post in the forums.
8/21/2015 7:14:57 PM
lived
Gravatar
Total Posts 50
View Posts

hide Login / Sign out url redirect ?

Dear all, 

Mojo is display the return url  ab.com/Secure/Login.aspx?returnurl=http%3a%2f%2abc2.com.my%2mainpage every time i log in and sign out. 

my client feel that is a security issue, Any way to hide this or disable this ? 

Please indicate which part of the program or web config i should setup 

 

thanks 

8/22/2015 8:20:39 AM
Joe Audette
Gravatar
Total Posts 18439
View Posts

Re: hide Login / Sign out url redirect ?

you can remove the login/logout links from the layout.master file of the skin located under /Data/Sites[SiteID]/skins/[skinname]

but then the users will have to know how to navigate to /Secure/Login.aspx to login without any link

8/22/2015 8:43:53 PM
lived
Gravatar
Total Posts 50
View Posts

Re: hide Login / Sign out url redirect ?

Hi joe , 

Can mask the url ＂www.ab.com/Secure/Login.aspx?returnurl=http%3a%2f%2abc2.com.my%2mainpage＂

to ＂www.ab.com/Secure/Login.aspx＂ or any other format but without the returnurl parameter ?

 

thanks 

  

8/23/2015 12:23:49 PM
Joe Audette
Gravatar
Total Posts 18439
View Posts

Re: hide Login / Sign out url redirect ?

the return url parameter is always the same url as the page that the user is currently visiting so the user already sees that url in the browser navigation bar. there is no security issue about that.

the idea of the return url parameter is to come back to the current page after login which is especially important to user experience when a user needs to login to complete a purchase in webstore or needs to login to post in the forums for example.

the user will never see a return url for a page that they do not have access to, it is always the same url as the current page the user is viewing

You must sign in to post in the forums. This thread is closed to new posts.