Securing my "thank you" page.

[tonynoriega]

I have a thankyou.php page that echo's back a paragraph and a link to a guest pass .pdf page.

how do i keep users from directly typing that page to access the guest pass?

i pass data from "register.php" to this page to store in a mysql dbase and to send me a confirmation email.

but am unsure on how to only display the paragraph and link ONLY if data has been passed?

[incrediBILL]

Pass the data server side only using a session variable.

[kaled]

If the thank-you page follows a form submission (POST not GET) then you should be able to check if valid POST data has been sent - if not then don't display the guest pass.

Kaled.