…but you do not properly wait for `Outseta.user` to become available. --- **This is why on your test page you saw `Outseta.user` is undefined** — Outseta was not fully initialized yet. --- ## ✅ Final protection script to use (for the course page and terms page) Here is a bulletproof version you can add to the **advanced code injection of those protected pages** (do not put in the site-wide header, but paste on *each protected page* under *Settings → Advanced → Page Header Code Injection*). ```html

Welcome!

In accordance with the signed Contract, I am authorized to access the CMMC Level 1 Course. I certify I have not shared my login credentials.

I Agree