<?php session_start(); if(!isset($_POST['submit'])) { echo <<<FORM <form method="POST"> Enter Security code: <br /> <img src="securityimage.php" /><input name="code" type="text" /> <input type="submit" name="submit" value="Send"> </form> FORM; } if ($_POST['code'] == $_SESSION['BBCODE']){ echo "פועל"; } ?>