How to restrict the user to copy and paste the URL in browser address bar in ASP.NET

Monday, March 26, 2012

This is one of the common restrictions you have to apply on a web application. If user is already login to the application and user knows the page extension user can directly copy and paste the URL in web browser to open the page, because user has got already an active session.

In such cases what we have to do is, we will make use of UrlReferrer property.

Please check below code, you may write below code in the page load of each page you wanted to restrict copy and paste of URL to open the page.

string strPreviousPage = "";
if (Request.UrlReferrer != null)
   {
    strPreviousPage = Request.UrlReferrer.Segments[Request.UrlReferrer.Segments.Length - 1];
    }
if(strPreviousPage =="")
    {
      Response.Redirect("~/Login.aspx");
     }

Above code will forcefully redirect to Login page if user copy and paste the URL to open the page.

Also along with this code you might be using your regular authentication code.

Please post your queries if you have any with this code and technique.

15 Comments

aulg4N I truly appreciate this article.Really looking forward to read more. Much obliged.

cheap oem software - Tuesday, May 1, 2012 6:20:01 PM

Just exactly what I was looking for it! Works great!! Thanks a bunch.

Honeydew - Thursday, June 7, 2012 1:20:26 PM

Thanks a lot sir...

nishant - Friday, July 13, 2012 4:34:15 AM

Bt i need to write this on every page na?????

vishal - Friday, August 3, 2012 10:59:58 AM

good to be valuable

ramachandran - Tuesday, August 7, 2012 6:58:06 AM

I need to use in a common page instead of using for all the pages if user copy and paste url.

Prakash - Wednesday, December 26, 2012 1:38:43 PM

hi, it is a great post. I used your code for my web page. It works good. But after I open a file(xml,pdf..,) by click a link(href), user should not paste the file url into another tab or browser. Something like you did for a page. Can you able to help me?

SSS - Tuesday, March 19, 2013 2:06:48 PM

Hi, we use Your Solution But When We Are Trying to Refresh Url then it forcefully send us to Login page. How to solve this problem ?? Plz Help Its Urgent...

Divyesh - Tuesday, April 2, 2013 8:26:03 AM

Sir,i want to know how can I restrict a user to edit the url of my asp.net application

rajak.sunil2007@gmail.com - Friday, May 10, 2013 12:31:28 PM

sir if i paste this code in the page load and when i start my project, let say i put this code on my ENTRY.ASPX page and int his code redirect url is LOGIN.ASPX so when ever i start my project my first page is LOGIN.ASPX instead of ENTRY.ASPX

Hemant - Thursday, May 16, 2013 3:38:13 PM

Great Help.. thaks mate.

Chandra - Monday, June 3, 2013 12:52:08 PM

Works great!! Thanks a lot !!1

Satish - Wednesday, July 3, 2013 7:40:12 AM

This is nice article but user have to write it on every page in place of that you can write your code on master page like that

if (!Request.FilePath.Contains("Default"))
{
string strPreviousPage = "";
if (Request.UrlReferrer != null)
{
strPreviousPage = Request.UrlReferrer.Segments[Request.UrlReferrer.Segments.Length - 1];
}
if (strPreviousPage == "")
{
Response.Redirect("Default.aspx");
}
Adding the above code in master page will work. considering the "Default.aspx" as the home page.

amiteshverma - Monday, July 8, 2013 2:29:35 PM

Nice Article....
It's Working fine....

Swarup - Friday, July 12, 2013 6:15:13 AM

valuable work,Pls, write related topic more. Thanx in advance.

PARTHA - Friday, August 2, 2013 8:20:02 AM

Comments have been disabled for this content.