Not just valid for asp - basically just putting a variable in the url and querying that the variable is set correctly. This does not prevent someone from just typing in siteA.com?checked=True&identifier=whatever and getting access to the site without logging in first.