Tegron,

>I implemented testing for the mmUserSecurity_RedirectionUrl and it works flawlessly in development. When I login and logout again, it is redirecting to the correct page. The problem still is when I deployed it this morning to the server I still get the message that I am logged in, but it doesn't redirect anywhere.
>
>This is frustrating since it works fine in developer mode, and I am trying to push Mere Mortals as a standard platform. It looks as if I may have to choose another form of security, since MM's security seems kind of hokey in test server mode. It is obvious to me that it is Mere Mortals, because it looks as if it is a MessageDisplay.aspx page from Mere Mortals that is displaying. So I don't think it is our server environment's configuration

I am using MM security in a deployed environment on several web apps now with no problem. I do not experience any of this issue. Your code below shows checking the session and then redirecting but I am not sure that would work as after looking I think the session variable is removed. I will have to check further into that.

What can you tell me about your test server mode? What exactly does that mean and what OS verion / IIS version etc are you running? I also am wondering about permissions to the file you are trying to redirect to. Is the page you are redirecting to in the same folder as the previous one?

How about creating a simple test web app with a login and two pages and test this without any of your app specific code.
Tim


>
>In my HookUserAuthenticated method I have the following code:
>
> if (Session["mmUserSecurity_RedirectionUrl"] == null)
> {
> Session["mmUserSecurity_RedirectionUrl"] = "default.aspx";
> }
>
>So it should always go to the default.aspx page if there are any problems. In my default.aspx page load is the following:
>
> //Retrieve Default WebConfig Settings
> this.defaultHomePage = ConfigurationSettings.AppSettings["DefaultHomePage"];
> this.defaultTimeout = Convert.ToInt32(ConfigurationSettings.AppSettings["DefaultTimeout"]);
>
> if (Page.Request.QueryString["Mode"] != null)
> {
> string Mode = this.Page.Request.QueryString["Mode"].ToString().Trim();
>
> if (Mode == "Logout")
> {
> mmBaseUserLogin.Logout();
> Response.Redirect("UserLogin.aspx");
> }
> else if (Mode == "Refresh")
> {
> this.UpdateDemographics();
>
> Response.Redirect(this.defaultHomePage);
> }
> }
> else
> {
> Response.Redirect(this.defaultHomePage.Trim());
> }