Verifying AUthorised Users through Session Variables not Working...?

Hi all. I'm using session variables to identify if a user is authorised, if yes - display x and so on. However, I've come across a couple of issues: when users access a page that's 2 folders deep into the root I.e. www.mydomain.com/folder1/folder2 any include references I use have to be absolute instead of relative, has anyone else come across this...? Also: users are not being authorised even though there's a variable that says they are. I have verified this by placing a file in folder1 and it displays fine but if I click a link to access a file in foder2 I get a login page - I shouldn't. Any ideas...? -- ----------------------------- Michael Mason Arras People www.arraspeople.co.uk -----------------------------