You probably need help from someone with Webassist on this (which I am not -- just another user), but I wonder about the restrict if userID = [blank] , if that's not part of the problem, I'd also check to make sure that the session variable userVerified is being properly set on the login page. Sorry if that's not much help.