S/A Authenticate User Server Behavior

Only users with admin rights can log in, when they log in sucessfully, they are redirected to a search page and can search the db. If a user not level 3 or anyone else attempts to log in they get sent to accessdenied page.

The only issue is if you type the url of the restricted page into the browser, it comes up no problem, so anyone can access it and search.

this is the code at the beginning of the page, Am I missing something here? just si you know, This restricted search page was written in php outside of D/A, but it works great.

<?php
error_reporting(E_ALL);
ini_set('display_errors','on');
?>

<?php require_once( "../WA_SecurityAssist/Helper_PHP.php" ); ?>
<?php
if (!WA_Auth_RulePasses("Administrator")){
WA_Auth_RestrictAccess("../accessdenied.html");
}
?>

thanks