Area Restrita

[AAAAAOOOOO]

Eae pessoal estou pretendendo criar uma are de acesso restrita.

Mas ai que tá ela não está sendo restrita:

<!--#Include File="Admin_Configs.asp"-->
<%
If Session("User_Cod") = "" or Session("User_Usuario") = "" Then
    If Request.QueryString("Action") <> "Login" Then
        Response.Redirect "Usuario.asp?Action=Login"
    Else
        If Request.Form("Entrar") = "Entrar" Then
            Email = RemoveLixo(LCase(Request.Form("Email")))
            Senha = RemoveLixo(LCase(Request.Form("Senha")))

            If Email = "" Then
                Erro = "O campo E-MAIL n&atilde;o pode estar vazio!"
            Else
                If Senha = "" Then
                    Erro = "O campo SENHA n&atilde;o pode estar vazio!"
                Else
                    Call AbreConexao(Conex)
                    Set rsLogar = Conex.Execute("SELECT ID,QtdeAcesso,DataAcesso,IpAcesso FROM Alunos WHERE Email='"& Email &"' and Senha='"& Senha &"' LIMIT 1")
                    
                    If rsLogar.EOF Then
                        Erro = "E-mail ou senha incorreta!"
                    Else
                        Charsets = "0|1|2|3|4|5|6|7|8|9|a|b|c|d|e|f|g|h|i|j|k|l|m|n|o|p|q|r|s|t|u|v|y|x|w|z"
                        CharsetsQ = Split(Charsets, "|")
                        Randomize
                        
                        While Len(Cod) < 200
                            Num = CharsetsQ(Int(UBound(CharsetsQ) * Rnd ))
                            Cod = Cod + Num
                        Wend
    
                        Usuario = rsLogar("ID")
                        QtdeAcesso = CLng(rsLogar("QtdeAcesso")) + 1
                        DatazAcesso = ""& Year(Now) &"/"& Month(Now) &"/"& Day(Now) &" "& Hour(Now) &":"& Minute(Now) &":"& Second(Now) &""
                        IpAcesso = Request.ServerVariables("REMOTE_ADDR")
                        
                        If rsLogar("DataAcesso") <> "" Then
                            DataAcessoAnt = ""& Year(rsLogar("DataAcesso")) &"/"& Month(rsLogar("DataAcesso")) &"/"& Day(rsLogar("DataAcesso")) &" "& Hour(rsLogar("DataAcesso")) &":"& Minute(rsLogar("DataAcesso")) &":"& Second(rsLogar("DataAcesso")) &""
                        Else
                            DataAcessoAnt = DataAcesso
                        End If
                        
                        If rsLogar("IpAcesso") <> "" Then
                            IpAcessoAnt = rsLogar("IpAcesso")
                        Else
                            IpAcessoAnt = IpAcesso
                        End If
                        
                        Conex.Execute("UPDATE Alunos SET Cod='"& Cod &"', QtdeAcesso="& QtdeAcesso &", DataAcessoAnt='"& DataAcessoAnt &"', IpAcessoAnt='"& IpAcessoAnt &"', DataAcesso='"& DataAcesso &"', IpAcesso='"& IpAcesso &"' WHERE ID="& Usuario)
                        
                        Session("User_Cod") = Cod
                        Session("User_Usuario") = Usuario
                        
                        Session.Timeout = 30
                        Response.Redirect "Usuario.asp"
                    End If
                End If
                
                rsLogar.Close
                Set rsLogar = Nothing
                Call FechaConexao(Conex)
            End If
        End If
    End If
Else
    If Request.QueryString("Action") = "Login" Then Response.Redirect "usuario.asp"
%>
<!--#Include File="User_Restrita.asp"-->
<%
    If Request.QueryString("Action") = "Sair" Then
        Session("User_Cod") = ""
        Session("User_Usuario") = ""
        
        Session.Contents.Remove("User_Cod")
        Session.Contents.Remove("User_Usuario")
        
        Response.Redirect "Usuario.asp?Action=Login"
    End If
%>
<%
    Call AbreConexao(Conex)
    Set rs1 = Conex.Execute("SELECT Nome,QtdeAcesso,DataAcessoAnt,IpAcessoAnt FROM Alunos WHERE ID="& Session("User_Usuario") &" LIMIT 1")
    
    If rs1.EOF Then
        Erro = "<p>Usu&aacute;rio n&atilde;o encontrado!</p>"
        Erro = Erro & "<p>Entre em contato com o programador do site.</p>"
    Else
        Nome = rs1("Nome")
        QtdeAcesso = rs1("QtdeAcesso")
        
        If HoraAcesso < 10 Then HoraAcesso = "0"& HoraAcesso &""
        If MinutoAcesso < 10 Then MinutoAcesso = "0"& MinutoAcesso &""
    End If
    
    rs1.Close
    Set rs1 = Nothing
    Call FechaConexao(Conex)
End If
%>
<table align="center" border="0" bordercolor="#FFFF00" cellspacing="0" cellpadding="0" width="100%" class="FormatInt">
    <tr>
        <td valign="top" align="left" colspan="2"><script type="text/javascript">exibe_flash('Logo.swf','240','50');</script></td>
    </tr>
<%
If Erro = "" Then
    If Request.QueryString("Action") = "Login" Then
%>    
    <tr>
        <td colspan="2">
        <table border="0" bordercolor="#00FF00" cellpadding="0" cellspacing="0" width="100%">
            <tr>
                <td valign="top">
                <table align="center" width="200" border="0" bordercolor="#00FFCC" cellpadding="1" cellspacing="1">
                    <form action="" autocomplete="off" method="post" name="Login">
                    <tr>
                        <td align="center" colspan="2"><script type="text/javascript">exibe_flash('Titulo_Usuario(Azul).swf','200','25');</script><!--img src="imagens/area_do_aluno.gif" width="200" border="0"!--></td>
                    </tr>
                    <tr>
                        <td><input type="Email" name="Email" value="Digite seu e-mail" onFocus="java script: if(this.value=='Digite seu e-mail')this.value='';" onBlur="if(this.value=='')this.value='Digite seu e-mail';" class="FormText" style="width:150px;"><br><font color="#CCCCCC" face="Verdana" size="1"><center><a href="">Não tenho cadastro</center></font></a></td>
                        <td><input type="password" name="Senha" value="Senhaaaa" onFocus="java script: if(this.value=='Senhaaaa')this.value='';" onBlur="if(this.value=='')this.value='Senhaaaa';" class="FormText" style="width:130px;"><br><font color="#CCCCCC" face="Verdana" size="1"><center><a href="">Esqueci a senha</center></font></a></td>
                    </tr>
                    <tr>
                        <td><img src="Imagens/spacer.gif" border="0" height="3"></td>
                    </tr>
                    <tr>
                        <td colspan="2" align="center"><input type="submit" value="Entrar" name="Entrar" class="FormBotao"></td>
                    </tr>
                    <tr>
                        <td><img src="Imagens/spacer.gif" border="0" height="15"></td>
                    </tr>
                </table>
                </td>
            </tr>
            </td>
        </tr>
        </table>
        <tr>
            <td>
            <table border="0" align="left" cellpadding="1" class="FormatInt">
                <tr>
                    <td align="left" colspan="2"><img src="imagens/imagens_cachorros/cachorro-lendo-jornal.gif" border="0" width="200" height="145"></td>
                </tr>
            </table>
            </td>
        </tr>
<%
    Else
%>
        <div id="menu" class="menu" align="left" align="justify" style="width: 160px;">
          <ul>
            <a href="">Meu Perfil</a>
            <a href="">Horários</a>
            <a href="">Especializa&ccedil;&otilde;es</a>
            <a href="">Perguntas frequentes</a>
          </ul>
        </div>
    </table>
    </td>    
</tr>
<%
'        End If
    End If
End If
%>
    <tr>
        <td colspan="2">&nbsp;</td>
    </tr>
</table>
<!--#Include File="Fim.asp"-->

[bareta]

uai... faz uma session e se tive valor ta logado se não tive vai pro login, onde preenche ela com alguma coisa

if session("logado")<>"sim" then
response.redirect "login.asp'
end if