Please login:

"; $form_data .= "Username:
"; $form_data .= "Password:"; $form_data .= ""; $form_data .= "

"; echo $form_data; } function check_login($user, $password) { $mysqli = new mysqli("localhost", "root", "", "users"); /* check connection */ if (mysqli_connect_errno()) { printf("Connect failed: %s
", mysqli_connect_error()); exit(); } $query = "SELECT * FROM users WHERE username = '".$user."' AND password = '".$password."'"; if ($result = $mysqli->query($query)) { $row_cnt = $result->num_rows; if ($row_cnt == 1) { return true; } else { return false; } } return false; } if (isset($_POST['user']) && isset($_POST['password'])) { $user = $_POST['user']; $password = $_POST['password']; //if ($user == "admin" && $password == "admin") { // $_SESSION['user'] = $_POST['user']; //} if (check_login($user, $password)) { $_SESSION['user'] = $_POST['user']; } } if (isset($_SESSION['user'])) { echo "Welcome ".$_SESSION['user'].", you are logged in!"; } else { show_form(); } ?>