login.asp
on line #56 find the following:
RequestMethod = Request.ServerVariables("Request_method")
Just below that line (on line #57) insert the following:
strTarget = trim(chkString(request("target"),"SQLString"))
on line #72 find the following:
if Request("target") = "" then
Response.Write "default.asp"
else
Response.Write request("target")
end if
replace it with this:
if strTarget = "" then
Response.Write "default.asp"
else
Response.Write strTarget
end if
on line #80 find the following:
if Request("target") = "" then
Response.Write "default.asp"
else
Response.Write request("target")
end if
replace it with this:
if strTarget = "" then
Response.Write "default.asp"
else
Response.Write strTarget
end if
on line #95 find the following:
" <input type=""hidden"" value=""" & chkString(request("target"),"display") & """ name=""target"">" & vbNewLine & _
replace it with this:
" <input type=""hidden"" value=""" & strTarget & """ name=""target"">" & vbNewLine & _