Hi all!

I'm creating a "members only" web site which also uses Web Wiz Forums (v7.3) for the message board area.

As I've seen in other posts...I'd like to use the Forum login page as the global login page for the whole site (and elimiate an extra logon for the forum).  I'm trying to tweak the logon_user.asp page for the logon.

Question is; what code do I need to protect my other pages that aren't part of the forum?

I've looked at the Web Wiz Login app and it uses:

<%
'If the session variable is False or does not exsist then redirect the user to the unauthorised user page
If Session("blnIsUserGood") = False or IsNull(Session("blnIsUserGood")) = True then
 
 'Redirect to unathorised user page
 Response.Redirect"unauthorised_user_page.htm"
End If
%>

As far as I know...Web Wiz Forums doesn't employ this type of security...

How do I go about protecting the rest of my site while carrying through the one logon?

Has anyone sucessfully employed this technique?

Thanks for any help you can provide!

McWilliams132

do you want member access only to ALL of your site, or just part of it?

I have no idea how to do this, but, I am thinking about setting up a section that is "partially private"

Fernan82 made a mod for that, take a look in the Mods and Addons forum, it's easy to use.

But do not use a beta version in a live website, better wait for the final release.

Member only to the entire site...

I'd need to be able to protect all the pages (so some monkey can't just go to home.asp or something like that by just typing in the URL).

This will be a controlled site...All members will be setup by invitation only (distributor site)...not by registration.

Thanks faubo...

I'm digging around the site right now...but nothing's in the mod & addon's area...

I'll search for Fernan82' posts and I think I remember seeing something from him on this very topic...

Thanks for your assistance...

Unfortunatly I'm looking for something a bit more robust/functional...

Mainly this:

- Stand-alone login page
- Error Prompt for bad logins
- ability to remember logon at next visit
- Link for password retreival
- Link for request for new account
- Redirect to the main site page after successful attempt

Now...I have played with your page (which is just a minor revision of the "login_user.asp" page) and my own modifications of the same login_user.asp page with little success...mainly because I don't know all the ins and outs and flow of the code...

I've modified the page so:

- the "your login is bad..try again" message apears above the login box (which is there in your code but not set to display)

- The Email retreival and Register options apear (just modified the login_user.asp page)

What I'm having a problem with is how the page handles the authentication and redirection.

I'm using a page external to the forum folder, so I'm using the <% server.execute "forum/login_xxx.asp" %> convention on a blank asp page.

I guess the main problem is the Form "action="xxxx.asp?id=xxxxx" info...I personally don't think it's nessasary to pass a value since I'm not going to initially be dropped into a forum area...but I do need the user to be logged into the forum.

I'm also guessing the main redirection is happening in the EMAIL UNSUBSCRIBE If/Then area (around line 144)...Not sure if this is set the way I need to use the page.

I've also tried using the "check_permissions.asp" mod and it doesn't seem to notice if I've been logged in or not...not reading the cookie placed or something?

I'm going to post this in the support or mod forums and see if I can get any more bites...

Thanks again!

McWilliams132