Security

Hi Any suggestions on how I lock access to certain pages, like the ones where information gets added to the site from?  Using IIS 5 and PHP 4 on Windows 2000 (No A.D.S. yet). Should I create a table in the DB with usernames and passwords and use that - I have played with that already, but still I dunnow how to stop them from typing the direct URL? I do not know how to use session variables yet, and I have an idea that they would come in handy. I'm also battling to get the header(); function to work after submitting a form. I think also a problem which might be solved using session variables - if you have code which does this, please may I see it. Thanks Warwick Chapman (1999) Assistant IT Manager Glenwood High School, Durban, South Africa 031 2055241 083 7797094 www.glenwoodhighschool.co.za