Hi Cetin

>I think you're not asking that for asp.net. If you only based your restriction on path discovery (one who knows the path can get in) then I don't know.

Yes, currently it is so, that when a person know the path they can access the related page.

>Otherwise you could query for a session variable. I used latter approach in my first web application. On site there weren't any htm/asp files other then some plain login, help etc ones. The link had a dll in it. All access was actually a call to a method via the dll. Methods simply check for sessionID first then generate htm and directly inject it back to the response buffer (poor man's site:).

Thanks for your suggestion, I will see what can be done in this regards. The dll you mentioned is available in the market or one has to create it as per requirement, if so, a VFP dll will require runtime files. If you can shed some light on this, I am a newbie in this internet regards.

Thanks.