if you set up a session and register a logged in flag i.e.
the login page would pass to a php script like this
<?
session_start();
session_register("loggedin");
if ( $password == "password" && $username == "admin" )
{
$loggedin=1;
header("location: mainmenu.php");
exit;
}
session_destroy();
?>
main menu would be something like
<?php
session_start();
if ( $loggedin != 1 )
{
header("location: login.html");
exit;
}
?>
<HEAD></HEAD>
<BODY>
menu goes here.
</BODY>
if you put the small piece of php at the top of every page then the page cannot be accessed unless the person has logged in.
Mark.