One simpler way than using CGI is to look at the docs for your web server: most offer a basic authenication package that allows restricted access to a web site (and sub pages) and you can redirect invalid accesses to a separate page. If your site doesn't comprise of a lot of dynamic content, this might be the best way to go.

Otherwise, there's about (infinity-1) ways to do dynamic authenication on a site, use Super Search or Google to find them.

---

Dr. Michael K. Neylon - mneylon-pm@masemware.com || "You've left the lens cap of your mind on again, Pinky" - The Brain