When I enter invalid credential to login it is returning me with a returnurl to the login page.
http://localhost:61089/scotkingcpa/login.aspx?ReturnUrl=%2fscotkingcpa%2flogin.aspx&loginfailure=1
Why is it doing this? Where am I telling it to append ReturnURL to login.aspx? When I enter invalid credentials at login.aspx it should just display an error message of invalid credentials and not put any url in the browser window. isn't this right?
Web.config:
<authentication mode="Forms">
<forms name=".AUTHCOOKIE" path="/" loginUrl="~/login.aspx" timeout="60" defaultUrl="~/users/default.aspx" protection="All" requireSSL="false" slidingExpiration="true" e ...
Go to the complete details ...