ok - i exited the browser, went back in and it now comes up as 0 everytime

sorry - that is now sorted - the session command and the response command were the wrong was around

Then, for the sake of argument, do this:
If CStr(Session("Authenticated")) <> "1" Then Response.Redirect ("Login.html")

I think you are passing an int value into your session values and:

"1" <> 1



================================================== =========
Read this if you want to know how to get a correct reply for your question:
http://www.catb.org/~esr/faqs/smart-questions.html
^^Took that from planoie's profile^^
^^Modified text taken from gbianchi profile^^
================================================== =========
Technical Editor for: Professional Search Engine Optimization with ASP.NET
http://www.wiley.com/WileyCDA/WileyT...470131470.html
================================================== =========
Why can't Programmers, program??
http://www.codinghorror.com/blog/archives/000781.html
================================================== =========

i will try that - for checking, i sent everything into answer.asp which had the code to see what figure cam back.

when i log in = 1
when i get log in wrong = 0
when i hit log out button, redirect to logout.asp with Session.Abandon() and redirect to answer.asp = 1 (after successful login)
when i go straight to log out button and hit it = 0

it now seems to be getting the correct answers except for the log out after log in. does it have to be Session.Abandon("Authenticated")???

...Session.Abandon() does not take any arguments. Session.Abandon() drops the entire session space. (All session variables, etc)

================================================== =========
Read this if you want to know how to get a correct reply for your question:
http://www.catb.org/~esr/faqs/smart-questions.html
^^Took that from planoie's profile^^
^^Modified text taken from gbianchi profile^^
================================================== =========
Technical Editor for: Professional Search Engine Optimization with ASP.NET
http://www.wiley.com/WileyCDA/WileyT...470131470.html
================================================== =========
Why can't Programmers, program??
http://www.codinghorror.com/blog/archives/000781.html
================================================== =========

ok, in that case, authenticated still = 1 after a log in and then redirecting through a session.abandon() command.

this is the same for Session_OnEnd being blank and when it has Session("Authenticated") = 0 written into the sub

ok, slowly pinpointing it - when i get to answer.asp after i login and try to log out the answer is 1, if i then refresh the page using CTRL+R then the answer is 0, the code is working but requires a refresh by the looks of it!

Cache is a pain in the ass huh ;] Your browser is always going to cache copies of your pages that is why when you login, then logout, then directly go to the URL of your protected page you are able to access it because the user is viewing the cached version in their browser.

What you need to do is tell your browser not to cache pages, at least the protected ones, by adding these directives to the top of your page:

<% Response.CacheControl = "no-cache" %>
<% Response.AddHeader "Pragma", "no-cache" %>
<% Response.Expires = -1 %>

"Much to learn you have, young padawan."

================================================== =========
Read this if you want to know how to get a correct reply for your question:
http://www.catb.org/~esr/faqs/smart-questions.html
^^Took that from planoie's profile^^
^^Modified text taken from gbianchi profile^^
================================================== =========
Technical Editor for: Professional Search Engine Optimization with ASP.NET
http://www.wiley.com/WileyCDA/WileyT...470131470.html
================================================== =========
Why can't Programmers, program??
http://www.codinghorror.com/blog/archives/000781.html
================================================== =========

haha :) this code goes at the top of all the pages i want it to? definately the protected ones though?

Yes.

================================================== =========
Read this if you want to know how to get a correct reply for your question:
http://www.catb.org/~esr/faqs/smart-questions.html
^^Took that from planoie's profile^^
^^Modified text taken from gbianchi profile^^
================================================== =========
Technical Editor for: Professional Search Engine Optimization with ASP.NET
http://www.wiley.com/WileyCDA/WileyT...470131470.html
================================================== =========
Why can't Programmers, program??
http://www.codinghorror.com/blog/archives/000781.html
================================================== =========