<?php
session_start();
           $_SESSION['user_logged']=$user;
             $_SESSION['user_password']=$password;
                      $user = $_POST["username"];
                        $password = $_POST["password"];


include("include/connect.php");
$msg = array();

if(isset($_POST['submit'])){

foreach($_REQUEST as $key=>$val){
 $$key=$val;
}

if(count($msg)==0){

$sql="SELECT username, password FROM admin WHERE username='$username' && password='$password'";
$res=mysql_query($sql) OR die(mysql_error());
    if(mysql_fetch_array($res)>0){
    $_SESSION['user_logged']= $user;
    $_SESSION['user_password']=$password;
    header("location:dashboard.php");
    echo "You looged in Successfully";
    }  else{
    $msg[]='Incorrect username/password';
    }

 }

    }
 ?>