hide all page unless ?key=

[teammist]

Like on mybb forums you see ?Action=register or whatever to go to a certain part of the registration process. I want to use this sort of "Method" but in a different way.

 

 

I want it to hide all the page on download.php unless they go to download.php?key=<KEY> so people without a key can't access it. I have looked all over google and all i found was form things what was no help for me.

 

if i am forced to do ?action=, i really don't mind.

 

But how would i do it?

 

Thanks!

[Christian F.]

http://php.net/_get <- Start here, then read this if you don't understand how to use that.

[teammist]

Would this work?

<?php

if ($_GET['key'] == "ACCESSKEY") print("CORRECT!");

else print("Incorrect Key Entered");

?>

[Christian F.]

Just try it, you'll find out quicker that way.

[teammist]

Just try it, you'll find out quicker that way.

 

Could i do it so they can put the key in a text box on a seperate page, once they click "Submit" it will take them to mysite.com/dl.php?key=<TheKeyTheySubmitted>

[PaulRyan]

Form Code:

<form method="GET" action="dl.php">
 Key: <input type="text" name="key" value="">
 <input type="submit" value="Submit Key">
</form>

 

dl.php Code:

<?PHP

 //### Preset valid key
 //### Should set this from a database of keys or something
 $validKey = 'CORRECTKEY';

 //### Check to see if the $_GET key variable is present
 if(isSet($_GET['key'])) {
   $downloadKey = $_GET['key'];
 } else {
   $downloadKey = false;
 }

 //### Check to see if the download key matches valid key
 if($downloadKey == $validKey) {
   echo 'Key is valid.';
 } else {
   echo 'Key is not valid.';
 }

?>

[Christian F.]

Don't need two IF-checks for that:

if (!isset ($_GET['key']) || $_GET['key'] != $validKey) {
   echo "Invalid or missing key.";
   die ();
}

echo "Valid key";