It is not intended for "bad" purposes. I'm wondering i set up a log-in page with a .asp ending and all, can people bypass it...