Then do what I did, the script below is only an example.. --snip-- <? if ($_REQUEST['dw'] == 0) { session_start() $_SESSION['username'] = ****; //Wherever you got the userid from $_SESSION['password'] = ****; //Wherever you got the password from
//if successful header("Location: *****"); } else if ($_REQUEST['dw'] == 1) { //blah blah blah } ?> <form **** method="POST" action="page1.php?dw=0"> <a href="page1.php?dw=1">page1</a> --snip-- That way, no one see the hidden code in html stuff like <a href=''> or <form *** action=''> for example. Hope that will give you an idea... :-) FletchSOD "Andy B" <[EMAIL PROTECTED]> wrote in message news:[EMAIL PROTECTED] > [snip] > You can use the HTTP Authentication instead for username and password. > [/snip] > > no i cant this time because the people want the login form to follow their > color setup and stuff and with www-authenticate: box you cant do that...so > for this project its out of the question... -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php