Untitled

<?php
	//DATABASE CONNECTION
	include 'dbconnect.php';
	$conn = new MyPDO();
	$conn->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);

	if(isset($_POST['login'])){
        $username = $_POST['username'];
        $password = $_POST['password'];

        $checkleerling = $conn->prepare("SELECT COUNT(id) FROM b1leerlingen WHERE (username = '$username') AND password = '$password'");
        $checkleerling->execute();
        $countleerling = $checkleerling->fetchColumn();

		$checkdocent = $conn->prepare("SELECT COUNT(id) FROM b1docenten WHERE (username = '$username') AND password = '$password'");
        $checkdocent->execute();
        $countdocent = $checkdocent->fetchColumn();


    if($countleerling == "1"){
		session_start();
        $_SESSION['login'] = 'BGHDJSAHFUASHFUDASHUXHFUADSFHUDIASHFRUEAHD';
        $_SESSION['perm'] = '0';
        $_SESSION['username'] = $username;
		header ('Location: panel.php');

	}else if($countdocent == "1"){
		session_start();
        $_SESSION['login'] = 'BGHDJSAHFUASHFUDASHUXHFUADSFHUDIASHFRUEAHD';
        $_SESSION['perm'] = '1';
        $_SESSION['username'] = $username;
		header ('Location: panel.php?page=home');

	}else{
    echo     ("<SCRIPT LANGUAGE='JavaScript'>
            window.alert('Foute inloggegevens')
            window.location.href='index.php';
            </SCRIPT>");}
    };
?>
<!DOCTYPE html>
<head>
<title>Home</title>
<link rel="stylesheet" type="text/css" href="style.css">
</head>
<body>
		<form method="post">
				Username:
				<input type="text" name="username">
				Password:
				<input type="password" name="password">
				<br>
				<input type="submit" name="login" value="login">
				</form>
				<form action="register.php">
				<input style="btn btn-default navbar-btn" type="submit" name="register" value="register">
		</form>