<?php

session_start();

$conn=mysql_connect("localhost","root");
mysql_select_db("smithy");

$a = $_POST["username"];
$b = $_POST["password"];

$result=mysql_query("SELECT * FROM users WHERE username='$a' AND password='$b'");
if(mysql_num_rows($result) == 0) {
    echo "Incorrect username and/or password!";
} else {
    $row = mysql_fetch_array($result);
    $_SESSION["authenticated"] = TRUE;
    $_SESSION["isadmin"] =  $row["isadmin"];
    $_SESSION["gatekeeper"] = $a;
    header("Location: main.html");
}

?>