session_start();// Configuration$correct_password = "frhat";// Logout Logicif (isset($_GET['logout'])) { session_destroy(); header("Location: " . $_SERVER['PHP_SELF']); exit();}// Login Logicif ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['login_password'])) { if ($_POST['login_password'] === $correct_password) { // Prevent Session Hijacking session_regenerate_id(true); $_SESSION['is_logged_in'] = true; } else { $error_message = "Invalid Password!"; }}// Access Control Checkif (!isset($_SESSION['is_logged_in']) || $_SESSION['is_logged_in'] !== true) { <!DOCTYPE html> <html lang="en">
<meta charset="UTF-8">