<?php

session_start();

if(isset($_POST['email']) && empty($_POST['email']) == false) {
	$email = addslashes($_POST['email']);
	$senha = md5(addslashes($_POST['senha']));

	$dsn = "mysql:dbname=login;host=localhost";
	$dbuser = "root";
	$dbpass = "vertrigo";

	try {
		$db = new PDO($dsn, $dbuser, $dbpass);
		$sql = $db->query("SELECT * FROM usuario WHERE email='$email', senha='$senha'");

		if($sql->rowCount() > 0) {
			$dados = $sql->fetch();


			$_SESSION['id'] = $dados['id'];
			header("Location: index.php");
		}

	}catch(PDOException $e) {
		echo "Falhou: ".$e->getMessage();
	}
}
?>

<form method="POST">
	Email:
	<input type="email" name="email"><br/>
	Senha:
	<input type="password" name="senha">
	<input type="submit" value="Entrar">
</form>