<?php
session_start();


$links = "<a href='logout.php'>click here to logout</a><br>";
$u = mysql_escape_string($_POST['user']);
$p = md5($_POST['pass']);


    $link = mysql_connect('localhost','root','') or die("Server not found");
    mysql_select_db('aclcsjdm');

    $result = mysql_query("SELECT * FROM users WHERE username='" .$u. "'AND password='" .$p. "'");

    if(!mysql_num_rows($result)){
        print "ACCESS DENIED<br>";
        print "<a href='login.php'>Click here to log in</a>";
        exit;
    }else{
        $data = mysql_fetch_array($result);
        $_SESSION["logged_in_user"] = $u;
        $_SESSION["access"] = $data['role'];
        print "Welcome $u <br>";
        header('Location:main.php');
    }
?>