I am about to implement a chat api not resident to dnn i just wondered if it is possible to protect none dnn pages in dnn called by the iframe to stop annymous users calling the absalute url. Etc cookie.....

MK

I am assuming that you want to have an IFrame that points to pages which are not part of dnn sintallation. And, you want to make sure that these pages are not called through a direct url.

Set your IFrame to pass a UserId and check on your non-DNN pages that the parameter exists. If it dosn't, or if it has no value, this means that a calling page is from an authenticated user on DNN.

Problem: this will not help if a user copies url from IFrame source, and then, plugs it into a browser address bar...