On Wed, 17 Sep 2003 19:32:22 -0700, "Yarn" <no**@noaddress.com> wrote:
pages?
For low traffic sites I just use sessions and redirect if not logged in
<%
if NOT session("loggedIn") = "true" then
response.redirect("index.asp")
end if
%>
Thats a very common method. I would add one item though. With this
scheme, you know that someone logged in, but you dont know WHO logged
in. Save the user's ID in the session variable, or save the session ID
in your database so you can look up who logged in. This takes even
less space and gives you more information :)