App minimum security !!

[Guest_imported]

Hi,
I have developed asp application with access..
Firstly on index page Iam checking whether user is valid/not
from the values stored in PasswordTbl.

One he is validated..Iam storing username/pwd in session variables and proceeding activities without any further validation on subsequent screens.


But, One thing Iam confused is that if user enters into that application not through the index page by typing name into URL..he gets access to that page.

My question is How can a force a user to Enter app via index page and how can i validate that user is valid through out the session.

Anybody who can give hints greatly appreciated.


Thanks

 

[Jonax]

You could do something like:

if session("UserName") = "" then
    response.redirect("login.asp")
end if

This is not a bug - it's an undocumented feature...
;-)