Untitled

<?php
$connection =  mysqli_connect("localhost", "root", "", "authdb");
if($_SERVER['REQUEST_METHOD']==="POST") {

    $username = mysqli_real_escape_string($connection, $_POST['username']);
    $pass = mysqli_real_escape_string($connection, $_POST['pass']);
    $email = mysqli_real_escape_string($connection, $_POST['email']);

    if($connection) {

        $query = " SELECT username, pass FROM users WHERE username LIKE '$username' ";
        $res = mysqli_query($connection, $query);
        $data = mysqli_fetch_assoc($res);

        if( $pass === $data['pass'] ) {
            echo 'True!';
        } else  {
            echo 'You Are Stupied.';
        }


//        $query  = "INSERT INTO users (username, pass, email )
//                 VALUES ( '$username',$pass, '$email' );";
//
//        $rows_affected = mysqli_multi_query($connection, $query);
//        if ( $rows_affected ) {
//            echo "success";
//        } else {
//            die("fuck you"." - ". mysqli_error($connection)) ;
//        }
    } else {
        die("Connection Faild!");
    }
}
?>

<!DOCTYPE html>
<html lang="en">

<head>
  <title>Login</title>
  <link rel="stylesheet" type="text/css" href="./css/style.css">
  <link href="https://fonts.googleapis.com/css?family=Raleway:300,400,500,700" rel="stylesheet">
</head>

<body>
  <div id="login-page">
    <div id="form-box">
      <form class="login-form" method="post" action="<?php echo htmlspecialchars($_SERVER['PHP_SELF']) ?>">
        <input type="text" name="username" placeholder="username" />
        <input type="password" name="pass" placeholder="password" />
        <input type="email" name="email" placeholder="E-mail" />
        <button>LOGIN</button>
        <p class="message">Not registered? <a href="#">Create an account</a></p>
      </form>
    </div>
  </div>
</body>

</html>