login.php

<?php
ob_start();
include'connect.php';

if(isset($_POST['username'])){ $user= $_POST['username']; }
if(isset($_POST['password'])){ $pass = $_POST['password']; }
$sql="SELECT * FROM users WHERE username='$user' and password='$pass'";
$result=mysql_query($sql);

$count=mysql_num_rows($result);
if($count==1){
 session_register("user");
session_register("pass");
header("location:admin.php");
} else {
echo "Wrong Username or Password";
}
ob_end_flush();
?>