So here's a
documented bug with ASP .NET 1.1 that microsoft accepts. The problem is when you have a postback control on a page and are using Server.Transfer along with it.
I am trying to figure out a secure way to transfer variables between pages without pushing it down to the browser with encrypted cookies. The application is too sensitive to have any user data on the client side. Maybe I have to go back to the good old way of shoving stuff in the Database :( . Anybody have suggestions to mitigate the problem? LEt me know.