APEX

Hi,

I'm trying to build an application to fit in with a pre-existing website.

This site authenticates users, setting appropriate session variables in a cookie. Then each asp page carries a script to check these session variables, denying access if they aren't correct.

I want my APEX application to fit in with this. Having read some of the documentation and browsed this forum, I'm thinking an open authentication application with an authorisation scheme based on these session variables.

My main problem is, how (if at all) I can get APEX to pick up on these session variables? I don't really want to start getting them out and sticking them in the URL used to call the application, because that would be a bit too easy to spoof.

Does anyone know a way of getting APEX to check a cookie and act on that? Or at least drag cookie variables over into its own session variables?

Cheers for any help.

Scott

P.S. It may show, I'm new to quite a lot of this!