You should create a cookie for the session so the user dosnt have to keep logging on everytime they open the browser.

Aren't you planning to hash the passwords?

I would do a check to see if the user is already logged on before allowing them to see the logon form again.

__________________
Search Marketing