thought this way would be easier rather than checking if the user is logged in every time they open a page which is in the folder(if they have the direct link). Not to sure how to protect from that!!
Is it possible to use the database for the permissions??