I see two problems. First is the ampersand after
username
: a browser will interpret this as
username
having an empty value, and
product
as the third parameter, not the second. Second, you have a stray ampersand outside of any quotes. Try this:
string url = "~/SummaryPage.aspx?username=" + username + "&product=" + product;