ASP.NET has this functionality built in. It's called Forms Authentication.
It is easily configured in your web.config file.
Here's more information:
http://www.dotnetbips.com/displayarticle.aspx?id=9
You may want to combine this with your session technique you mentioned to
determine which links to make visible on your page.
--
I hope this helps,
Steve C. Orr, MCSD
http://Steve.Orr.net
"Carl" <(E-Mail Removed)> wrote in message
news:85f501c35ad8$5d56ef00$(E-Mail Removed)...
> Hi,
>
> I am starting to develop an ASP.Net application.
>
> I will have a logon page which will take a UserName and
> Password. A Stored Procedure will verify that the logon
> is correct.
>
> I was going to use a Session Variable to indicate whether
> the user is logged on or not. Based on this variable I
> would show certain links, allow access to certain pages.
>
> Is this a good idea or is there a better way?
>
> Thanks.
> Carl.