Hi all,

I am building content site with Umbraco, one of the requirement is that content should not be accessed by any anounymous user.

In order to achieve it, I am thinking to build following items:

• A new landing page to take request from referral page, take parameters from query string or form post. Create session object after authenticated.
• The landing page redirect to Umbraco pages.
• Create a HttpModule and wire up with Umbraco, the HttpModule will detect the session object created by landing page. If not available just kick the user out.

I am not sure if I am doing something stupid, maybe Umbraco has some built-in features already.

Another thing is that I am not 100% for sure, if I wire my own HttpModule with Umbraco, does it screw the entire Umbraco site?

Thanks for any input.

Hardy