I don't really have an answer for you, but I have a suggestion.
I think you should consider a password protected subfolder on your host.
Then it does not matter if they know the address or name of the page or
files on your site, they will still need a password to access them. A server
side solution is a better long term solution than javascript in my opinion.
Don outlined one server side approach (.htaccess) earlier in this thread.
You won't have this option with a Windows server, but there will be other
alternatives offered by different web hosts. Almost all offer a method to
create a password protected subfolder. You will usually find the
instructions in the FAQ section under support. It usually is not that hard
to do, and you can always ask your host support for additional help in
installing the subfolder. You will usually be able to create a password
protected subfolder from your web host control panel. You might call the
folder "members".
Now you are going to break up your website by using multiple Publisher
files. Create a new Publisher file and build your "passpage" or a "members"
publication. You can copy and paste the whole page at one time from your
main web publication, which you can open in a second instance of Publisher.
Once you get the page copied, then delete it from the main web publication.
Write a link to the subfolder from your main site and upload the changes.
Publish your new page, just do the same thing that you do with the main
site, and when you do the Publish to the Web direct the html output to the
new subfolder you created "members". You can use the default index.htm file
name.
Then your link to the new sub site you just created would be:
http://yourwebsite.com/members/index.htm
But to access the page you would need the password.
You also now have a folder where you can upload additional content, such as
PDF files for downloading. You could also add additional webs that you
create with more Publisher files...and perhaps create subfolders within the
members folder, or when you name the html output, instead of the default,
name the file much as you suggested: passpage.htm. Here is some more
information about building websites with multiple Publisher files: Building
a web site with multiple Publisher web publication files:
http://msmvps.com/blogs/dbartosik/archive/2006/01/16/81264.aspx
Anyway, that's the way I would approach it. More and more people are
deactivating javascript as a safety concern. I wouldn't want to be
dependent upon javascript. Besides having a password protected folder and
building your site with multiple Publisher files is far more versatile.
DavidF