% useSession(); // allow authenticated session only if( request["SESSION_ID"]!=session["sessionid"] ) redirect('/index.html'); // allow root only if(session["user"]!="root") redirect('/index.html'); %>