set my_Conn = Server.CreateObject("ADODB.Connection")
my_Conn.Open strConnString

if (strAuthType = "nt") then
	call NTauthenticate()
	if (ChkAccountReg() = "1") then
		call NTUser()
	end if
end if

strDBNTUserName = Request.Cookies(strUniqueID & "User")("Name")
strDBNTFUserName = trim(chkString(Request.Form("Name"),"SQLString"))
if strDBNTFUserName = "" then strDBNTFUserName = trim(chkString(Request.Form("User"),"SQLString"))
if strAuthType = "nt" then
	strDBNTUserName = Session(strCookieURL & "userID")
	strDBNTFUserName = Session(strCookieURL & "userID")
end if

if strRequireReg = "1" and strDBNTUserName = "" then
	if not Instr(strScriptName,"policy.asp") > 0 and _
	not Instr(strScriptName,"register.asp") > 0 and _
	not Instr(strScriptName,"password.asp") > 0 and _
	not Instr(strScriptName,"faq.asp") > 0 and _
	not Instr(strScriptName,"login.asp") > 0 then
		scriptname = split(request.servervariables("SCRIPT_NAME"),"/")
		if Request.QueryString <> "" then
			Response.Redirect("login.asp?target=" & lcase(scriptname(ubound(scriptname))) & "?" & Request.QueryString)
		else
			Response.Redirect("login.asp?target=" & lcase(scriptname(ubound(scriptname))))
		end if
	end if
end if

select case Request.Form("Method_Type")
	case "login"
		strEncodedPassword = sha256("" & Request.Form("Password"))
		select case chkUser(strDBNTFUserName, strEncodedPassword,-1)
			case 1, 2, 3, 4
				Call DoCookies(Request.Form("SavePassword"))
				strLoginStatus = 1
			case else
				strLoginStatus = 0
			end select
	case "logout"
		Call ClearCookies()
end select

if trim(strDBNTUserName) <> "" and trim(Request.Cookies(strUniqueID & "User")("Pword")) <> "" then
	chkCookie = 1
	mLev = cLng(chkUser(strDBNTUserName, Request.Cookies(strUniqueID & "User")("Pword"),-1))
	chkCookie = 0
else
	MemberID = -1
	mLev = 0
end if

quote:

---

Originally posted by gtw

I am making progress, but slowly

Let me confirm my understanding of your instructions.

I would like to try the very most simple revsision first

would that be to add these two lines in the beginning of the new asp page

<!--#INCLUDE FILE="config.asp" -->
<!--#INCLUDE FILE="inc_header.asp" -->

---

quote:

---

or should it be the three lines

<!--#INCLUDE FILE="config.asp" -->
<!--#INCLUDE FILE="inc_func_common.asp" -->
<!--#INCLUDE FILE="inc_header.asp" -->

---

quote:

---

Then if I were to try adding the specific script I would add these two lines at the beginning

<!--#INCLUDE FILE="config.asp" -->
<!--#INCLUDE FILE="inc_func_common.asp" -->

followed by the lines you have cut from inc_header.asp

---

if mlev > 0 then
   Response.Write	"      <p align=""center""><font face=""" & strDefaultFontFace & """ size=""" & strHeaderFontSize & """ color=""" & strHiLiteFontColor & """>Sorry, you must be logged in to access this page!</font></p>" 
   Response.End
   WriteFooter()  '<- This only if you have written the forum's header as well.
end if

quote:

---

Originally posted by gtw

Dear ruirib

Thank you for all your help I changed the mlev > 0 above to mlev = 0 and then also added a redirect to login.asp so as to help the not logged on visitor take the next step...without the redirect there was some problem in the header log in ...gave an error message

---

quote:

---

You took some time and effort to get me this far...you may want to package this as a MOD and call it something like "CheckLoginstatus.asp" and all that users would have to do is add a line <!--#INCLUDE FILE="checkloginstatus.asp" --> in the first part of any asp program to be limited to logged on members

---

quote:

---

There is a gremlim associated with not logged on members fooling the check mlev value when they go directly to the protected page...the automatic logon and password memory sometimes gets them directly to the protected page...but I will work on that issue separately

---