Hi guys first post here but long time visitor, i have been building an asp website for a highschool project, and this forum has been a god send and has helped me greatly, however there is one aspect of my asp that im having trouble with and that is with the admin login.
at the moment i have a session login for every user that redirects them to a page called Groups.asp,
it works like this, user starts of at index.asp --> username and password or then passed onto check_user.asp
check_user.asp ----> checks the users login against the database info & if correct sends them to Groups.asp
login code can be seen below
If thisRecordset("Password") = Request.Form("Password") Then
username = request.Form("StudentID")
session("thisusername") = username
session("cust_passed") = true
I also have the following code in each page to ensure users are logged in before they can view the page.
<%if session("cust_passed") = false then%>
however on my site i have a navigation header that has an admin button on it, which at the moment every user can access just by clicking on it.
would it be possible to just redirect administrator straight to the admin section when they login? in which case i could just remove the admin button from the navigation and it wouldnt really matter about other people accessing the page as they wouldnt have any direct link to it.
if any other information is needed please say
cheers in advance