Hi, I am ravi, i am facing a critical problem.
Actually We have a webserver and a reportserver.
In webserver iis is running and the virtual dirctory is configured.
In report server some excel reports are there.
The user should click the link and able to download the reports after logged in.
But if the user gives a direct path to the excel report, it allows the user to download.
We have set up the aunthentication in webserver. but the problem is, if it is a direct path, it goes to the report server and picks the file. any help?

This is a very basic (but effective) concept.
1..User logs in
2..Set a session variable EG session("userID") = RS("ID")
3..Now on any page you require them to be logged in place the following towards the top of the page.
IF session("ID") = "" then
   response.redirect("login.asp")
end if

As you see if the havnt logged in properly they will not be able to access any page that has the above condition.

FYI : Whats the point in building a log-in page if you dont check 'are they logged in'


Wind is your friend
Matt