<?php
session_start();

$links = "<a href='logout.php'>click here to logout</a><br>";
$u = mysql_escape_string($_POST['user']);
$p = md5($_POST['pass']);

    $link = mysql_connect('localhost','root','') or die("Server not found");
    mysql_select_db('aclcsjdm');

    $result = mysql_query("SELECT * FROM users WHERE username='" .$u. "'AND password='" .$p. "'");

    if(!mysql_num_rows($result)){
        print "ACCESS DENIED<br>";
        print "<a href='login.php'>Click here to log in</a>";
        exit;
    }else{
        $data=mysql_fetch_object($result);
        $_SESSION["logged_in_user"] = $u;
        $_SESSION["access"] = $data->role;
        $_SESSION["fname"] = $data->first_name;
        $_SESSION["lname"] = $data->last_name;
        header('Location:main.php');
        exit;
    }
?>