title: LightopenID regarding protecting web pages
body: <p>So I have the example-google.php script working, after loging in it throws the default user string has logged in. But my question is how does this protect anything?</p>
  
  <p>Lets say I have //127.0.0.1/example-google.php and I added a href to //127.0.0.1/abc.php after the login is successful.</p>
  
  <p>Well what keeps someone from just typing 127.0.0.1/abc.php? granted I could use $_SESSION to verify that "someone" logged in. But is that going to be enough? Is there a way to re-verify that the user that is trying to access abc.php is truely logged in when thrown from the other page?</p>