[Resolved] include

[30minutes]

I want to include a document on my main page and there is a security risk with my code.Can you show me a better way to do this? Also, is there a way to set up a dummy page if people try to access it?

<?
include($DOCUMENT_ROOT . "/welcome2.php"); 
echo$DOCUMENT_ROOT;
?>

[paulnaj]

You could make all users that need to access that page "registered". They then login on the home page, or wherever, and you register a session variable on the server.

On the page you wish to include, at the top of the file, you can check whether someone has logged in, using the session variable, and re-direct them using the header() function if they haven't.

[30minutes]

Ok, I'm going to work on making a session.If I have any more questions of if it doesn't work, I'll come back.I'm going to mark this as resolved.Thank you 🙂