Ok, so will this prevent this scenario?:
just say my login page is: www.holycrap.com/login
Right now the way my page is set up, if somebody types in:
www.holycrap.com/search
They totally bypass the login and go straight into the database. If it does could you go into a little more detail about userid.