<%@ Language=VBScript %> <% Response.Buffer = True %> <% If session("allow") = False Then Response.Redirect "main.asp" %>