<?php

session_start();
include('db.php');

if(!empty($_POST['user']) && !empty($_POST['pass']))
{
    $user = stripslashes($_POST['user']);
    $pass = md5($_POST['pass']);

    $user = mysql_real_escape_string($user);
    $pass = mysql_real_escape_string($pass);

    $sql="SELECT * FROM memberregister WHERE nick='$user' and pass='$pass'";
    $result=mysql_query($sql);

    $count=mysql_num_rows($result);

    if($count==1){
        $_SESSION["user"] = "yes";
        header("location:insideIndex.php");
    }
    else {
        header("location:error.php");
    }
}
?>