Cool, but not quite. I don't want users to be able to access it unless they login, period, but I got the part sorted out.
The sessions is the main problem. They shouldn't be able to press "BACK" on their browser & still be logged in unless they refresh.
Does anyone know how to sort that problem out?