<?php
  session_start();
  require_once "connect.php";

  $connect = @new mysqli($host, $db_user, $db_pass, $db_id);
  if($connect->connect_errno!=0)
  {
    echo "Error: ".$connect->connect_errno." Desc: ".$connect->connect_error;
  }
  else
  {
  $login = $_POST[login];
  $pass = $_POST[haslo];

  $login = htmlentities($login, ENT_QUOTES, "UTF-8");
  $pass = htmlentities($pass, ENT_QUOTES, "UTF-8");

  if($polaczenie = @$connect->query(
    sprintf("SELECT * FROM uzytkownicy WHERE user='%s' AND pass='%s'",
    mysqli_real_escape_string($connect,$login),
    mysqli_real_escape_string($connect,$pass))))
  {
    $ile_recordow = $polaczenie->num_rows;
    if($ile_recordow>0)
    {
      $_SESSION['zalogowany'] = true;

      $wiersz = $polaczenie->fetch_assoc();
      $_SESSION['user'] = $wiersz['user'];

      $polaczenie->close();
      header('Location: gra.php');
    }
    else {
      $_SESSION['blad'] = '<span style="color:red">Niepoprawne dane</span>';
      header('Location: index.php');
    }
  }

  $connect->close();
  echo "$login <br/> $pass";
  }
 ?>