Thanks for the help,
dont worry about the security this is just to be used for fun it does not give access to anything that needs to be kept secure otherwise I would use a database with server side coding.
Works great though, I was nearly there with the || but was using the wrong syntax below...