<?php

require('db_connect.php');

if(isset($_POST['submit'])){
	if(!empty($_POST['username']) && !empty($_POST['password'])){
		$username =$_POST['username'];
		$password =$_POST['password'];


		$query = mysqli_query($conn, "SELECT * FROM users WHERE username='".$username."' AND password='".$password."'");
		$numrows = mysqli_num_rows($query);
		if($numrows !=0)
		{
			while($row = mysqli_fetch_assoc($query))
			{
				$dbusername=$row['username'];
				$dbpassword=$row['password'];
			}
			if($username == $dbusername && $password == $dbpassword)
			{
				session_start();
				$_SESSION['sess_user']=$username;
				//Redirect Browser
				header("Location:index.php");
			}
		}
		else
		{
			echo "<script language=\"JavaScript\">\n";
  			echo "alert('Invalid username or password!');\n";
  			echo "window.location='./login.php'";
  			echo "</script>";
		}
	}
	else
	{
		echo "<script language=\"JavaScript\">\n";
  		echo "alert('Required All fields!');\n";
  		echo "window.location='./login.php'";
  		echo "</script>";
	}


}











?>