<?php
//connect to mysql

$con = mysqli_connect('***','***','***','***');

if (mysqli_connect_errno())

{

echo "err";

echo mysqli_connect_error();

}

// check the user

if(isset($_POST['login'])){

$user = mysqli_real_escape_string($con,$_POST['user']);

$pass = mysqli_real_escape_string($con,$_POST['pass']);

$run_user = mysqli_query($con, "SELECT * FROM `UserName` WHERE userName = '$user' AND pass = '$pass'");

$check_user = mysqli_num_rows($run_user);


if($check_user > 0)

{

$cookie_name = "user";
setcookie($cookie_name, $user, time() + (86400), "/");

$_SESSION['User'] = $user;

echo "Logging in as " . $user;

sleep(1);

echo ".";

sleep(1);

echo ".";

sleep(1);

echo ".";

sleep(5);

echo '<script>window.location.assign("http://www.peter-archer.co.uk/adminpanel.php");</script>';

}

else

{

echo "Error during login, check user/pass";

}

}

?>