i have a users profile page where a user can view/update their info.

i need to put user log-in and restriction so that the user can't change the 'USERID' number in the querystring and see somebody elses information/details.

the user will login with their username (email address) and password. also in the database there is a unique userid number.

so i need to have a login page that takes the user to user_profile.asp?userId=15

i need to prevent the user from changing it to user_profile.asp?userId=23 and veiwing someone elses details.

You will have to use a the session object instead of passing the userid in a querystring that anyone could read and change.

mm_ultradev, i dont suppose you would know how to do that would you?
i would like to do that also but wouldnt have an idea on how to use sessions, i dont suppose you know what the code is by any chance do you to do that??<img src=../images/dmxzone/forum/icon_smile_big.gif border=0 align=middle> <img src=../images/dmxzone/forum/icon_smile_wink.gif border=0 align=middle>