if(isset($_POST['submit'])){
                            $username = (isset($_POST['username']))? $_POST['username'] : die("Please input a username!");
                            $password = (isset($_POST['password']))? md5($_POST['password']):die("Please input a password");

							if($stmt = $mysqli->prepare("SELECT username,id,role FROM users WHERE username = ? AND password = ? LIMIT 1" )){
								$stmt->bind_param("ss",$username,$password);
								$stmt->execute();

								$res = $stmt->get_result();
								if($res->num_rows > 0){
									while($row = $res->fetch_assoc()){

									$_SESSION['username'] = $row['username'];
									$_SESSION['id'] = $row['id'];
									$_SESSION['role'] = $row['role'];

									header('location: dashboard.php');
									exit();

									}

								}else{
									echo "No username/password found with that combination";
								}

							}else{
								echo "error";
								print_r($mysqli->error);

							}

                         }