I have a six page web site. To enter the site a user needs to enter a userid/password. How can I stop someone from entering the site by bypassing the password page and going directly to another page. Say if someone were to email someone else the URL of one of my pages. Could I use a session variable to verify that they put in a proper userid/password? Or is there another way?

thanks,
eye