<?php
	session_start();
	//include("header.php");
	//include("functions.php");

	$master = $_POST['master'];
	$char = $_POST['user'];

	if(!isset($_POST['submit'])) {

	if($master != "spy33") {
 		echo "Bad Masterpass";
	} else
	if(empty($_POST['user']) || empty($_POST['master'])) {
		echo "Empty user/pass field";
	} else {
	$_SESSION['char'] = $char;
	header("Location: test.php");
	}
}

?>

<p>
<center>
<form method="post"
	action="<?php $_SERVER['PHP_SELF']; ?>">
Username:
<input type="text" name="user" />
<br>
Master Password:
<input type="text" name="master" />
<br>
<input type="submit" value="Submit" />

</form>
</center>

<?php


?>