How do I determine the user logon and how do I stop direct access

[yongbum]

Hi
I'm writting an asp.net app. which will be included as part of the customers intranet site. The user has to logon to the customers site to gain access to my app.
I have 2 questions.
1. How can I determine the logon id is it
Request.ServerVariables("LOGON_USER")
or is this the Windows logon ?

2. How can I ensure that they can't arrive directley to my app via the http address, the only way in should be through the customer site.

Thanks for any help

 

[adamroof]

Dim winUser As System.Security.Principal.WindowsIdentity = System.Security.Principal.WindowsIdentity.GetCurrent
Dim strUser As String = winUser.name

that will return DOMAINNAME\username, and can be in your global declarations