I have a series of asp pages that I need to secure. I have a login page that authenticates to a SQL table with usernames and passwords. Upon validation to SQL, the user is redirected to a page to post a string of data. Problem is, as you probably expected, you can skip the login screen and go directly to the post page if you know the url. How do I set an application level variable to true when the login succeeds on the Login.asp page and check to be sure that the value is still set to true on the Post page? In other words, the variable would only be set to true if validated against the passwords table and the post page would check the value of this variable before performing any actions. Thanks for any help here.