Hi there, I had the same problem...now I'm sending a random valued cookie to the user's browser and to the user table in a database.
I compare the value of the cookie in the browser against the value in the database if it matches voila! it's the user. You could use a text file to store the user/value pairs. There's my two cents. I hope it helps. Marcos >>> "Wagner Garcia Campagner" <[EMAIL PROTECTED]> 10/10/01 11:04AM >>> Hi, I have three web pages, for example: login.html, page1.pl and page2.pl... In the first page i send the username and the password to the page1.pl through FORM POST METHOD: <FORM NAME="formulario" METHOD="post" ACTION="page1.pl"> <table border="0" bgcolor="black" cellpadding="2"> <tbody><tr><td> <table border="0" bgcolor="FBC900" cellspacing="0" cellpadding="15"> <tr><td> <table border="0" bgcolor="FBC900" cellspacing="0" cellpadding="2"> <TR><TD align=right><FONT SIZE=3 COLOR=black><B>USER:</B></FONT></TD> <TD><INPUT TYPE="text" NAME="username" VALUE="" SIZE=10></TD></TR> <TR><TD align=right><FONT SIZE=3 COLOR=black><B>PASSWORD:</B></FONT></TD> <TD><INPUT TYPE="password" NAME="passwd" VALUE="" SIZE=10></TD></TR> <TR><TD COLSPAN=2 ALIGN=CENTER><INPUT TYPE="submit" value="OK"></TD></TR> </table> </td></tr></table> </td></tr></tbody></table> </form> So i get this in page1.pl as follos: $name = param('username'); $pass = param('passwd'); if (($name eq 'gest') && ($pass eq 'password')) Only if user=guest and pass=password the page is displayed otherwise it is redirected to another page... Now what i want to do is send this username and password to the page2.html... I'm doing like this: <FORM METHOD=post ACTION=page2.pl> <INPUT TYPE=hidden NAME=username VALUE=$nome> <INPUT TYPE=hidden NAME=password VALUE=$pass> <INPUT TYPE="submit" value="OK"> The problem is when i do "view source" on the page1.pl I can see the username and the password in plain text.... Is there a way for me to pass this information to page2.pl without everyone see it when "view source" is used??? Thanks in advance and forgive me for this long text, Wagner. -- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]