$(document).ready(function() {
$("#submit").click(function() {
    if ($("#submit").is(":disabled") == false) {
        var user = $("#user").val();
        var pass = $("#pass").val();
        var submit = $("#submit").val();
        $('#user').prop("disabled", true);
        $('#pass').prop("disabled", true);
        $('#submit').prop("disabled", true);
        $('#container').hide();
        $("#result").html('<i class="fa fa-circle-o-notch fa-spin fa-3x fa-fw"></i>');
        $.post('http://localhost/attack/api.php', {
            user: user,
            pass: pass,
        },
        function(data) {
            var message = $(data).filter("#message").html();
            var status = $(data).filter("#status").html();
            setTimeout(function () {
                $('#result').html(message);
                if(status == "letLogin") {
                    console.log("Success");
                } else {
                    $('#result').html('Error');
                    console.log("Error");
                }
            }, 0);
        });
    };
});

<?php
session_start();
$con = new PDO("mysql:host=localhost;dbname=firebyte", 'root', '');
?>

<?php
include 'db.php';
include 'function.php';
$user = $_POST['user'];
$pass = $_POST['pass'];
$site = new site();
if ($site->in($user, $pass)) {
echo '<div id="message">';
echo '<div class="alert alert-dismissible alert-success">';
echo '<button type="button" class="close" data-dismiss="alert">&times;
</button>';
echo '<div id="text-working"><strong>Congratulations, Well done!</strong>
Logging in to your account... <i class="fa fa-refresh fa-spin" aria-
hidden="true"></i></div>';
echo '</div>';
echo '</div>';
echo '<a id="status">letLogin</a>';
} else {
echo '<div id="message">';
echo '<div class="alert alert-dismissible alert-danger">';
echo '<button type="button" class="close" data-dismiss="alert">&times;
</button>';
echo 'Network error.';
echo '</div>';
echo '</div>';
echo '<a id="status">networkError</a>';
}
?>

<?php
include 'db.php';
// $db_con = new PDO("mysql:host=localhost;dbname=database", 'root', '');
// $this->db = $db_con;
class site {
public function in($user, $pass) {
try {
$stmt = $con->prepare("SELECT * FROM users WHERE user = :user");
$stmt->execute(array('user' => $user));
$row = $stmt->fetch(PDO::FETCH_ASSOC);
$count = $stmt->rowCount();
if($row['pass'] == $password) {
$_SESSION['user_session'] = $row['user_id'];
$loggedin = true;
return true;
} else {
$loggedin = false;
return false;
}
}
catch(PDOException $e) {
echo $e->getMessage();
}
}
}
?>