Thanks for your reply
What do you mean by " Keep it on the server with the session object"--> could you show me an example pls...thanks
this is what i am doing now

see attached, it wont let me upload a .asp or .inc file)
Validate is the main validation page that checks u at login
and val1 is the include file i use on each page to check if you logged in
Thanks