<?php

//salting of password
$salt="@g26jQsG&nh*&#8v";
$password= sha1($_REQUEST['pwd'].$salt);

$sql= "SELECT email,password FROM customer WHERE email='$username' AND password='$password'";
$result=mysqli_query($success, $sql) or die(mysql_error());
$rws=  mysql_fetch_array($result);

//$sql = mysqli_query($success, "SELECT * FROM login WHERE username = '".$_POST['username']."' and password = '".md5($_POST['password'])."'");
//$row = mysqli_num_rows($sql);

$user=$rws[0];
$pwd=$rws[1];

if($user==$username && $pwd==$password){
    session_start();
    $_SESSION['customer_login']=1;
    $_SESSION['cust_id']=$username;
header('location:customer_account_summary.php');
}