Untitled

<!DOCTYPE html>
<?php
/**
 * Created by PhpStorm.
 * User: Fahad Uddin
 * Date: 3/16/2018
 * Time: 9:03 PM
 */
include "../includes/db.php";
$flag= 0;
if (isset($_POST['login'])) {
    $login = $_POST['login'];
    $password = $_POST['password'];
    $query = "SELECT * FROM users WHERE login='$login' AND password='$password'";
    $rows = $db->query($query);
    if (is_array($rows) || is_object($rows)):
            $flag=1;
    endif;
    ?>

    <?php
}
if (!$flag){
//session_start();
?>
<body>
<form action="" method="post">
    Login:<input type="text" name="login"><br>
    Password:<input type="password" name="password"><br>
    <input type="submit" name="submit">
</form>
</body>

<?php
}
else{
    session_start();

    echo "Your are in";
}
?>