I am wondering if there is a way to prevent members from accessing the memberlist. I would like to have the list private to admin.

Any suggestions would be greatly appreciated.

Smac-Daddy

after the include of the common.asp file add this:

<%
If blnAdmin = False Then
      adoCon.Close
      Set adoCon = Nothing
      Set rsCommon = Nothing

      Response.Redirect("default.asp")
End If
%>

Now you can change default.asp to anything you want.

I am fairly new to this and am having a little difficulty figuring out where exactly to put this code?

I did it my way... maybe not the best but obviousl working:

If you want just to show the buttons to moderators and admins, then do as follows.

(Change the respective intGroupID with whatever group(s) you want to show the list)

1. Hide the buttons

includes/navigation_buttons_inc.asp

Arround line 70:

'show the memberlist button only if user is mod/admin
IF intGroupID = 1 or IntGroupID = 3 THEN

 Response.Write ("&nbsp;&nbsp;<a href=""members.asp"" target=""_self"" class=""nav""><img src=""" & strImagePath & "members_list.gif"" border=""0"" align=""absmiddle"" alt=""" & strTxtMembersList & """>" & strTxtMemberlist & "</a>")
END IF

Put the response.write line with the link to the members.asp in the above IF / ENDIF statement.

2. Avoid clever users to access the members.asp without proper rights:

Change the Elseif Statement around line 247 as follows:

'If the user is neither mod nor admin display an error message

ElseIf intGroupID = 2 OR intGroupID =4 OR intGroupID = 5 OR intGroupID = 6 Then

 Response.Write (vbCrLf & "<span class=""bold"">This function is not public.</span><br /><br />")

Keep the response.write statement on one line.

Hope this helps.

DotPing

why not do it as MadDog said?

much cleaner and easier..

just place the code on line 4 in members.asp..