I finally got my login and password business working great and suddenly realized I'm screwed! I am hoping there is a way out of this box.<BR><BR>I want to serve up files for download, topo map files to be exact. The user logsin and goes to my download page which contains a set of hyperlinks to each of the individual files. The download page itself is protected with an include at the top but I can't figure out how to secure the files themselves! <BR><BR>If I put them in a folder that provides an NT challenge/response login that won't work because my users have only my local page login Session variable. They click on the hyperlink and get challenged. <BR><BR>I can't just leave them out in the open. Is there a way to secure the contents of a folder with an include file where I can reference the Session variable?? The files are just jpg so I can't do a thing with them directly.<BR><BR>Please help!! thanks.