The normal way to combat this is to create an include file which you include in all the pages which need to be password protected.

The code for this would look something like this:

Code: Select all

If Session("Authenticated")=False Then
Response.Redirect "Login.asp"
End If

...of course when the user logs in you need to created a session called "Authenticated" and set it to True.

Hope that helps