on your checklogin page
<%
'Logic for checking your username and password
'if username and password matches initialize a session variable
Session.Contents("UserOK") = "Yes"
%>
on all of your restricted pages put this code before anything else
<%
IF Session.Contents("UserOK") <> "Yes" Then
Response.Redirect("login.asp")
End IF
%>
on your logoff script clear this session variable using Session.Abandon
If all of the above does not make sense, Grab an ASP book and read on session variables.
|