<?php
session_start();
include("connect.php");
$pw = mysql_real_escape_string($_POST['pw']);
$un = mysql_real_escape_string($_POST['un']);
$query = mysql_query("SELECT * FROM admini WHERE username='$un' AND password='$pw'");

if(mysql_num_rows($query) == 1)
{
    $row = mysql_fetch_array($query);
    $_SESSION['user'] = $row['usr'];
    $_SESSION['level'] = $row['level'];
    header("Location: success.php");
}
else
{
    echo "error!";
}
?>