<?phpsession_start();$msg = "<div>Enter security code: </div>";if(!empty($_POST["sCode"])){ if($_SESSION['security_code'] == $_POST["security_code"]){header("location:process.php");} else{$msg = "<div style='color:#f00;'>Incorrect security code. Try again.</div>";} }?><html><head><title></title></head><body><form action="#" method="post"><?phpecho $msg;?><input type="text" name="security_code"><br /><input type="submit" name="sCode" value="Submit"></form></body></html>