Untitled

<?php
session_start();
$conn = new mysqli("localhost", "root", "", "park");
if(isset($_POST['login_btn']))
{
    $username= $_POST['username'];
    $password= $_POST['password'];

    $password=md5($password);
    $sql= "SELECT * FROM users WHERE username='$username' AND Password='$password'";
    $result = mysqli_query($conn,$sql) or die(mysqli_error());
    $rows = mysqli_num_rows($result);
        if($rows==1){
        $_SESSION['username'] = $username;
        header("Location: success.php");
         }else{
    echo "<div class='form'>
<h3>Username/password is incorrect.</h3>
<br/>Click here to <a href='login.php'>Login</a></div>";
    }

}
?>
<html>
<body>
<div id="bodyContent">
<h1> Login </h1>
</div>
<form method="post">
<table>
<tr>
<td>Username: </td>
<td>
<input type="text" name="username" class="textInput">
</td>
</tr>

<tr>
<td>Password: </td>
<td>
<input type="password" name="password" class="textInput">
</td>
</tr>

<tr>
<td> </td>
<td>
<input type="submit" name="login_btn" value="Login">
</td>
</tr>

</table>
</form>
</body>
</html>