hey guys, I have been asked to create something to force the user to change passsword on fist login using Classic ASP. I was thinking that perhaps the best way to go about it was to create a numeric field on the database, let's say set to 1 as default. when login first login occurs I check if the user's field is set to 1 if so, then redirect user to change password and if not 1 then go to whatever page it should go.

Is this ok. Or is there a better way to do it? has anyone done that...ideas????

Thanks,

Javier