title: Is this a good way to pass variables between asp.net pages
body: <p>It's the first time I'm passing variables between two pages in my asp.net project. 
  It works, but I'm wondering if it is a good way to do it? Is it secure? Is there a better way?
  The reason why I ask is that I've have learned never to use concatenation in sql, but instead use parameters (which I always do from now on). Is there a similar risk in this case?</p>
  
  <p>In web page1:</p>
  
  <pre><code>    protected void Button1_Click(object sender, EventArgs e)
      {
          string email = txtEmail.Text;
          string date = txtDate.Text;
          string time = txtTime.Text;
          string name = txtName.Text;
  
          string url = "~/change.aspx?newemail="+mail+"&amp;newdate="+date+"&amp;newtime="+time+"&amp;newname="+name+"";
          Response.Redirect(url);
      }
  </code></pre>
  
  <p>In web page2:</p>
  
  <pre><code>    protected void Page_Load(object sender, EventArgs e)
      {
          String email = Request.QueryString["newemail"];
          String date = Request.QueryString["newdate"];
          String time = Request.QueryString["newtime"];
          String name = Request.QueryString["newname];
          TextBox1.Text = email;
          TextBox2.Text = date;
          TextBox3.Text = time;
          TextBox4.Text = name;
      }
  </code></pre>