Untitled

<html>
<head>
<link rel="stylesheet" href="style.css">
<title>De Canio & Varotto</title>
</head>
<body>

<form id="form" action="#" method="post">
	<div id="login" align="center">
		 <div id="login-top">
			<h3>Login Panel</h3>
		</div>
		<hr>
		<table>
		<tr><td align="center"><p>Username  </p></td>
		<td ><input type="text" name="user"></td></tr>
		<tr><td align="center"><p>Password  </p></td>
		<td><input type="password" name="pass" ></td></tr>
        <tr><td><input type="submit" name="submit" value="OK" id="btn" ></td></tr>
		<table>
	</div>
</form>

<?php
session_start();
function checklogin($x,$y,$conn){

$q="select user,pass from Membri";
$res=mysqli_query($conn,$q);

while($row=mysqli_fetch_array($res)){

$u=$row['user'];
$p=$row['pass'];

    if($u==$x && $p==$y){
        return true;
        break;
}}}

if(isset($_POST['submit'])){
    $user=$_POST['user'];
    $pass=$_POST['pass'];


if($user!=null && $pass!=null){

	$conn=mysqli_connect("localhost","root","");
	$db=mysqli_select_db($conn,"telefonia");
    if(checklogin($user,$pass,$conn)){

        echo "<p id='check' style='color:green;'>login corretto</p>";

        $_SESSION['user']=$_POST['user'];
        $_SESSION['pass']=$_POST['pass'];

        header("Location:main-page.php");

    }else{

       echo "<p id='check' style='color:red;'>login errato</p>";
    }
}else{

     echo "<p id='check' style='color:red;'>inserisci i campi mancanti</p>";
}

}

?>
</body>
</html>