# Protecting Pages and Preventing Unauthorised Access
A protected page checks authentication on the server before sending restricted content. Hiding a menu link is not protection because a user can enter the URL directly.
## Require a logged-in user
Place this before any HTML:
~~~php
Dashboard
User dashboard
Welcome, .
~~~
## Use a reusable guard
Create `includes/require-login.php`:
~~~php