KELOX

You could instead of redirecting to the Handler, use it as the Response, in other words have the Handler write the the file as its response.

This way you don't actually have to leave the page and you keep full control over the user's session and identity. You can even secure your handler to make sure it only responds to certain requestors and/or requests with parameters or cookies or whatever you decide.

If you don't want to do that you could send the userid (portalid and moduleid) in the query string or store it in a cookie etc. and re-construct the user object in the handler, you could encrypt the data before sending it too.

Good luck!


Josh