title: How do I keep my Login.aspx page's ReturnUrl parameter from overriding my ASP.NET Login control's DestinationPageUrl property?
body: <p>I'm using the <a href="http://msdn.microsoft.com/en-us/library/ms178329.aspx" rel="noreferrer">ASP.NET Login Controls</a> and <a href="http://msdn.microsoft.com/en-us/library/aa480476.aspx" rel="noreferrer">Forms Authentication</a> for membership/credentials for an ASP.NET web application.  I've got pages such as <em>PasswordRecovery.aspx</em> that are accessable to only Anonymous users.  When I click my login link from such a page, the login page has a <em>ReturnUrl</em> parameter in the address bar:</p>
  
  <blockquote>
    <p><a href="http://www.example.com/Login.aspx?ReturnUrl=PasswordRecovery.aspx" rel="noreferrer">http://www.example.com/Login.aspx?ReturnUrl=PasswordRecovery.aspx</a></p>
  </blockquote>
  
  <p>And then after a successful login, users are returned to the <em>PasswordRecovery.aspx</em> page specified in the <em>ReturnUrl</em> parameter to which they no longer have access.</p>