diff --git a/session/composer.json b/session/composer.json
new file mode 100644
index 0000000..b7cf0fe
--- /dev/null
+++ b/session/composer.json
@@ -0,0 +1,12 @@
+{
+    "name": "violet/spies",
+    "type": "project",
+    "autoload": {
+        "psr-4": {
+            "Violet\\Spies\\": "src/"
+        }
+    },
+    "require": {
+        "vlucas/phpdotenv": "^5.6"
+    }
+}
diff --git a/session/css/.gitkeep b/session/css/.gitkeep
new file mode 100644
index 0000000..e69de29
diff --git a/session/css/styles.css b/session/css/styles.css
new file mode 100644
index 0000000..944041f
--- /dev/null
+++ b/session/css/styles.css
@@ -0,0 +1,179 @@
+* {
+  margin: 0;
+  padding: 0;
+}
+
+body {
+  /* Positioning */
+  display: flex;
+  flex-direction: column;
+  justify-content: center;
+  align-items: center;
+
+  /* Styling */
+  background-color: #bbedbe;
+}
+
+h1 {
+  /* Positioning */
+  width: 100%;
+  padding: 2vw;
+
+  /* Font */
+  font-size: 6vw;
+  text-align: center;
+}
+
+h3 {
+  font-size: 4vw;
+}
+
+h5 {
+  font-size: 2vw;
+}
+
+h1,
+h3,
+h5,
+p,
+input {
+  color: #0e3610;
+}
+
+
+#content {
+  display: flex;
+  flex-direction: column;
+  justify-content: center;
+  align-items: center;
+  width: 100%;
+}
+
+#account-content {
+  display: flex;
+  width: 80%;
+}
+
+#account-content img {
+  width: 400px;
+  height: auto;
+}
+
+#nav {
+  /* Form Shape */
+  width: 100%;
+  padding: 0;
+
+  /* Positioning */
+  display: flex;
+  flex-direction: row;
+  justify-content: center;
+  align-items: center;
+}
+
+#update-pw {
+  /* Form Shape */
+  width: 100%;
+  padding: 0;
+
+  /* Positioning */
+  display: flex;
+  flex-direction: column;
+  justify-content: center;
+  align-items: center;
+}
+
+form {
+  /* Form Shape */
+  width: 60%;
+  padding: 2.5vw 5vw 2.5vw 5vw;
+
+  /* Positioning */
+  display: flex;
+  flex-direction: column;
+  justify-content: center;
+  align-items: center;
+}
+
+.row {
+  /* Row Shape */
+  width: 100%;
+  display: flex;
+}
+
+input {
+  /* Input Shape */
+  width: 50%;
+  padding: 1vw;
+  margin: 1vw;
+  border: none;
+  border-radius: 18px;
+
+  /* Styling */
+  background-color: #f1fbf2;
+
+  /* Font */
+  font-size: 1vw;
+  font-weight: 400;
+}
+
+button {
+  /* Button Shape */
+  width: 60%;
+  padding: 1vw;
+  margin: 1vw;
+  border: none;
+  border-radius: 18px;
+
+  /* Font */
+  color: white;
+  font-size: 1vw;
+  font-weight: 600;
+
+  /* Transition for hover */
+  transition-duration: 500ms;
+
+  background-color: #1c6b20;
+}
+
+button:hover {
+  background-color: #26942D;
+}
+
+table {
+  border-spacing: 0;
+  table-layout: fixed;
+  width: 40%;
+  border: 1px solid black;
+}
+
+td {
+  margin: 0;
+  padding: 1vw;
+  border: 1px solid black;
+  text-align: center;
+}
+
+.card {
+  padding: 2vw;
+  background-color: gray;
+  border-radius: 18px;
+}
+
+.error {
+  color: white;
+  background-color: red;
+}
+
+.success {
+  color: white;
+  background-color: #0e3610;
+}
+
+.reset {
+  background-color: #cc0000;
+}
+
+.reset:hover {
+  background-color: #FF0000;
+}
diff --git a/session/hidden.php b/session/hidden.php
new file mode 100644
index 0000000..ac1eee6
--- /dev/null
+++ b/session/hidden.php
@@ -0,0 +1,71 @@
+<?php
+$users = array('chuck' => 'roast', 'bob' => 'ross');
+$access = false;
+
+if (isset($_POST['username']) && isset($_POST['password'])) {
+    $username = $_POST['username'];
+    $password = $_POST['password'];
+    if (array_key_exists($username, $users) && $users[$username] === $password)
+        $access = true;
+}
+
+$file = 'fbi.txt';
+
+function fileRead($file)
+{
+    if (isset($_GET['fbi']))
+        $file = 'fbi.txt';
+    else
+        $file = 'spies.txt';
+    if ($access) {
+        echo "reading $file";
+        $fs = fopen($file, 'r');
+        $string = fread($fs, filesize($file));
+        $values = explode('||>><<||', $string);
+
+        echo '<table>';
+        foreach ($values as $v) {
+            list($a, $b) = explode(',', $v);
+
+            echo '
+              <tr>
+                <td>' . $a . '</td>
+                <td>' . $b . '</td>
+              </tr>
+            ';
+        }
+        echo '</table>';
+    } else
+        header('Location: .?access=false');
+}
+?>
+<!doctype html>
+<html lang="en">
+
+<head>
+  <title>Spies</title>
+  <link href="css/styles.css" type="text/css" rel="stylesheet">
+  <script src="js/index.js"></script>
+</head>
+
+<body>
+  <h1>View Confidential Information</h1>
+
+<?php
+if ($access) {
+    echo '<p>Access Granted</p>';
+
+    echo '
+        <button name="fbi" type="submit" method="get">FBI</button>
+        <button name="spies" type="submit" method="get">Spies</button>
+    ';
+
+    fileRead($file);
+}
+?>
+</body>
+
+</html>
+
+<?php
+?>
diff --git a/session/img/.gitkeep b/session/img/.gitkeep
new file mode 100644
index 0000000..e69de29
diff --git a/session/img/bob.jpg b/session/img/bob.jpg
new file mode 100644
index 0000000..8720541
Binary files /dev/null and b/session/img/bob.jpg differ
diff --git a/session/includes/account.php b/session/includes/account.php
new file mode 100644
index 0000000..f450535
--- /dev/null
+++ b/session/includes/account.php
@@ -0,0 +1,27 @@
+<?php
+session_start();
+
+if ($_SESSION['access'] !== true)
+    header('Location: .');
+
+include_once ('functions.php');
+
+echo '<h1>Account</h1>';
+
+if (isset($_POST['password1']) && isset($_POST['password2'])) {
+    if ($_POST['password1'] == $_POST['password2']) {
+        update_user_pw($_POST['password1']);
+    } else {
+        $_GET['error'] = true;
+    }
+}
+
+echo '<div id="account-content">
+        <img src="' . get_user_image() . '" />
+        <form method="post" id="update-pw">
+            <input name="password1" type="password" placeholder="New Password">
+            <input name="password2" type="password" placeholder="Retype New Password">
+            <button>Submit</button>
+        </form>
+    </div>';
+?>
diff --git a/session/includes/fbi.txt b/session/includes/fbi.txt
new file mode 100644
index 0000000..06a9203
--- /dev/null
+++ b/session/includes/fbi.txt
@@ -0,0 +1 @@
+skinner,gatekeeper||>><<||csm,alien||>><<||dana,skeptic||>><<||fox,believer
\ No newline at end of file
diff --git a/session/includes/functions.php b/session/includes/functions.php
new file mode 100644
index 0000000..271cfb9
--- /dev/null
+++ b/session/includes/functions.php
@@ -0,0 +1,155 @@
+<?php
+// Use environment variables for the database password and IP address.
+$db_pass = $_ENV['DATABASE_PASSWORD'];
+$ip_addr = $_ENV['IP_ADDRESS'];
+
+// Make some constants
+if ($_SERVER['HTTP_HOST'] == 'localhost') {
+    define('HOST', 'localhost');
+    define('USER', 'root');
+    define('PASS', $db_pass);
+    define('DB', 'session');
+} else {
+    define('HOST', $ip_addr);
+    define('USER', 'root');
+    define('PASS', $db_pass);
+    define('DB', 'session');
+}
+
+function getHome()
+{
+    echo '<h1>View Confidential Information</h1>';
+    if ($_SESSION['access'] !== true) {
+        if (isset($_GET['error']) && $_GET['error'] === true) {
+            echo '
+          <div class="card error">
+            <h5 class="error">Access Denied.</h5>
+            <p class="error">Invalid username or password.</p>
+          </div>
+        ';
+        }
+        echo '
+        <form method="post">
+          <div class="row">
+            <input name="username" type="text" placeholder="username">
+            <input name="password" type="password" placeholder="password">
+          </div>
+          <div class="row">
+            <button>Submit</button>
+            <button type="reset" class="reset">Reset</button>
+          </div>
+        </form>
+    ';
+    } else if (isset($_GET['file']) && isset($_SESSION['access'])) {
+        echo '
+    <div class="card success">
+      <h5 class="success">Access Granted.</h5>
+    </div>
+    <form method="get">
+      <div class="row">
+        <button name="file" value="includes/fbi.txt">FBI</button>
+        <button name="file" value="includes/spies.txt">Spies</button>
+      </div>
+    </form>
+  ';
+        fileRead($_GET['file']);
+    }
+}
+
+function fileRead($file)
+{
+    $fs = fopen($file, 'r');
+    $string = fread($fs, filesize($file));
+    $values = explode('||>><<||', $string);
+
+    echo '
+    <table>
+      <tr>
+        <th>Agent</th>
+        <th>Codename</th>
+      </tr>
+    ';
+    foreach ($values as $v) {
+        list($a, $b) = explode(',', $v);
+
+        echo '
+              <tr>
+                <td>' . ucfirst($a) . '</td>
+                <td>' . ucwords($b) . '</td>
+              </tr>
+            ';
+    }
+    echo '</table>';
+}
+
+function authUser()
+{
+    if (isset($_POST['username']) && isset($_POST['password'])) {
+        $username = $_POST['username'];
+        $password = $_POST['password'];
+
+        // Connect to the DB
+        $conn = mysqli_connect(HOST, USER, PASS, DB);
+
+        // Write a DB query
+        $sql = 'SELECT password FROM users WHERE username = "' . $username . ' ";';
+
+        // Run DB query
+        $results = mysqli_query($conn, $sql);
+
+        if (mysqli_num_rows($results) == 0) {
+            $_GET['error'] = true;
+        } else {
+            $row = mysqli_fetch_assoc($results);
+
+            if ($row['password'] == $password) {
+                $_SESSION['access'] = true;
+                $_GET['file'] = 'includes/fbi.txt';
+                $_SESSION['username'] = $username;
+            } else {
+                $_GET['error'] = true;
+            }
+        }
+    }
+}
+
+function get_user_image()
+{
+    // Connect to the DB
+    $conn = mysqli_connect(HOST, USER, PASS, DB);
+
+    // Write a DB query
+    $sql = 'SELECT image_path FROM users WHERE username = "' . $_SESSION['username'] . ' ";';
+
+    // Run DB query
+    $results = mysqli_query($conn, $sql);
+    $row = mysqli_fetch_assoc($results);
+
+    return $row['image_path'];
+}
+
+function update_user_pw($password)
+{
+    // Connect to the DB
+    $conn = mysqli_connect(HOST, USER, PASS, DB);
+
+    // Write a DB query
+    $sql = 'UPDATE users SET password = "' . $password . '" WHERE username = "' . $_SESSION['username'] . ' ";';
+
+    // Run DB query
+    $result = mysqli_query($conn, $sql);
+    if ($result) {
+        echo '
+        <div class="card success">
+            <h5 class="success">Password Updated!</h5>
+        </div>';
+    } else {
+        echo '
+          <div class="card error">
+            <h5 class="error">Password update failed!</h5>
+            <p class="error">Something went wrong in the server...</p>
+          </div>
+        ';
+    }
+}
+?>
diff --git a/session/includes/nav.php b/session/includes/nav.php
new file mode 100644
index 0000000..4d87dcc
--- /dev/null
+++ b/session/includes/nav.php
@@ -0,0 +1,24 @@
+<?php
+session_start();
+
+echo '
+  <form method="get" id="nav">
+    <button name="page" value="account">Account</button>
+    <button name="page" value="home">Home</button>
+    <button name="page" value="video">Video</button>
+    ' . getLogoutButton() . '
+  </form>
+';
+
+function getLogoutButton()
+{
+    if ($_SESSION['access'] === true)
+        return '<button name="logout" value="true" class="reset">Logout</button>';
+}
+
+if (isset($_GET['logout'])) {
+    $_SESSION['access'] = false;
+    session_destroy();
+    header('Location: .');
+}
+?>
diff --git a/session/includes/spies.txt b/session/includes/spies.txt
new file mode 100644
index 0000000..d67c36a
--- /dev/null
+++ b/session/includes/spies.txt
@@ -0,0 +1 @@
+dale,the government||>><<||bill,the barber||>><<||hank,the texan||>><<||boomhauer,the marshall
\ No newline at end of file
diff --git a/session/includes/video.php b/session/includes/video.php
new file mode 100644
index 0000000..6f6c15f
--- /dev/null
+++ b/session/includes/video.php
@@ -0,0 +1,11 @@
+<?php
+session_start();
+
+if ($_SESSION['access'] !== true)
+    header('Location: .');
+
+echo '<h1>YouTube Video</h1>';
+echo '
+<iframe width="560" height="315" src="https://www.youtube.com/embed/8BIcAZxFfrc?si=DMccopjQMFNs361I" title="YouTube video player" frameborder="0" allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share" referrerpolicy="strict-origin-when-cross-origin" allowfullscreen></iframe>
+';
+?>
diff --git a/session/index.php b/session/index.php
new file mode 100644
index 0000000..fea5ca6
--- /dev/null
+++ b/session/index.php
@@ -0,0 +1,43 @@
+<?php
+session_start();
+require_once 'vendor/autoload.php';
+
+$dotenv = Dotenv\Dotenv::createImmutable(__DIR__);
+$dotenv->safeLoad();
+
+include_once ('includes/functions.php');
+authUser();
+?>
+
+<!doctype html>
+<html lang="en">
+    <head>
+        <title>Session</title>
+        <link href="css/styles.css" type="text/css" rel="stylesheet">
+        <script src="js/index.js"></script>
+    </head>
+
+    <body>
+        <?php include ('includes/nav.php'); ?>
+        <div id="content">
+            <?php
+            $page = $_GET['page'];
+            switch ($_GET['page']) {
+                case 'home':
+                    $_GET['file'] = 'includes/fbi.txt';
+                    getHome();
+                    break;
+                case 'video':
+                    include ('includes/video.php');
+                    break;
+                case 'account':
+                    include ('includes/account.php');
+                    break;
+                default:
+                    getHome();
+                    break;
+            }
+            ?>
+        </div>
+    </body>
+</html>
diff --git a/session/js/.gitkeep b/session/js/.gitkeep
new file mode 100644
index 0000000..e69de29
diff --git a/session/js/index.js b/session/js/index.js
new file mode 100644
index 0000000..e69de29