helo....guys, i just figure out that, if user key in the correct url, they can access the web form which is my creation.and dont allow user who nx log in ...