<?php
if(isset($_GET['login'])) {

    $uName  = ($_POST['uName']);
    $uPass  = ($_POST['uPass']);

    $sql    = "SELECT uId, uName, uPass FROM users WHERE uName = '".$uName."' AND uPass = '".$uPass."' LIMIT 1";
    $run    = sql_query($sql);
    if (sql_num_rows($run) == 1) {
        $x  = sql_fetch($run);
        $_SESSION['loggedin'] = $x['uId'];
        header('location: ?page=home');
    } else {
        $_SESSION['loggedin'] = 0;
        header('location: ?page=login');
    }
} else {
?>
<form action="?page=login&login" method="post">
Username: <input type="text" name="uName" id="uName" />
Password: <input type="password" name="uPass" id="uPass" />
<button type="submit">Login</button>
</form>
<?php
}
?>