[vicz]

Originally Posted by pseudonym

If you visit a site using Access authentication, then your browser sends an "Authorization:" header with an obfusticated username:password (something like Authorization: Basic r3y1r45DCB67E89BOZbdAV==) with every request after you've logged on - they can check for that header and ignore your request and the server's response.

If a site uses other methods such as cookies to verify that you've logged in then I can't see them checking, although I suppose it might be possible to check for common cookie names used to store log-ins by forum software. They can also check the robots.txt to see if google is allowed to index the pages.

Somehow I can't see them doing anything but the last unless pushed.