Problem: if i login my site with id and password then what url I get from the address bar, if I copy this url from the address and paste in the new tab or browser then I can login in my site without veryfy Id and password. what is the solution?
If I understand correctly your login script produces a URL once they have submitted there details. Your saying that this URL can then be entered into a new tab or browser and will verify the user. If this is the case it means that the form you are using has its method set to 'get'. If you change this to 'post' than when the form is submitted it will not have the information in the URL. You will then have to change your script that reads this accordingly.