Another solution would be to set a cookie on the login.asp page ie
<%
........
Sub cookie()
   Response.Cookies("UserData")("ID") = oConn("UserID")
   Response.Cookies("UserData")("SecurID") = oConn("SecurityID)
   Response.Cookies("UserData")("IP") = IP
   Response.Cookies("UserData")("Cleared") = Cleared      'Or whatever you
like
End Sub

  strUsername = Request.Form("Username")   'get login form data
  strPassword = Request.Form("Password")

    Set oConn = Server.CreateObject("ADODB.Recordset")
    sql = "SELECT * FROM Users WHERE Users.Username= '"& strUsername & "';"
    oConn.Open  sql, strConnect, adOpenForwardOnly, adLockReadOnly,
adCmdText

 If oConn.EOF Then
  go("notregistered.asp")

 Else
    If oConn("Password") = strPassword Then
            strAccess = oConn("SecurityID")

    Select Case strAccess   ' redirect user according to access level or
just simply redirect
     case 1
          Cleared = 1
          cookie()    ' set cookie if access allowed
          Response.Redirect("adminframe.htm")

      case 2
           Cleared = 2
           cookie()
         Response.Redirect("Umenu.asp")

      case 3
           Cleared = 3
           cookie()
           go("Umenu3.asp")
     End Select
            :
            : etc..
%>

Then at the top of each page that requires logged in access you could call a
function ie

<% Kleer() %>

which you could put in an include file, something like...

Sub Kleer()
  Dim Clear
    Clear = Request.Cookies("UserData")("Cleared")
  If Clear <> 1 Then
    Response.Redirect("home.htm")
  End If
End Sub


HTH

peter


----- Original Message -----
From: <playhard@m...>
To: Security_asp <security_asp@p...>
Sent: Saturday, January 20, 2001 4:57 AM
Subject: Check ASP page for login


> Hi,
> On an ASP page, how would I check to make sure the user came to that page
> from my login.asp page?