$serverSecret = 'MT34Z9J'; function isValidCookie($cookie, $secret) { list($value, $hash) = explode('|', $cookie, 2); return hash_equals(hash_hmac('sha256', $value, $secret), $hash) && $value === 'ok'; } if (!isset($_COOKIE['verified_user']) || !isValidCookie($_COOKIE['verified_user'], $serverSecret)) { header("Location: /turnstile_gate.php?back=" . urlencode($_SERVER['REQUEST_URI'])); exit; } PAMPA live