how i can prevent any one try to enter url for internal page in my site before checking his legal login ? i think it called (session variables)