if($_POST['pwd']){
        if ($_POST['pwd'] == $password){
        session_start();
        $_SESSION['active'] = TRUE;
        echo 'logged in';
        }
        else{
        if ($_GET['pwd'] != $password){
        echo 'DENIED';
        }
    exit;
    }
    }
if(!$_SESSION['active']){
    echo' You will need to login to view info on this page!';
    echo '<form action="index.php?action=index" action="post">
            <input type = "name" name="username"/>
            <input type="password" name="pwd" />
            <input type = "submit" value ="submit" />
          </form>';
}