<?php
session_start();
if($_SERVER["REQUEST_METHOD"] == "POST")
{
require_once('conn/conn.php');
$user=$_POST['user'];
$pass=md5($_POST['pass']);
$addonq = "WHERE username='".$user."' AND password='".$pass."'";
$user = $koneksi->prepare("SELECT * FROM user ".$addonq."");
$user->execute();
$row = $user->fetch(PDO::FETCH_ASSOC);

if(empty($row['username'])){

echo "Your Login Name or Password is invalid";

}else {
$_SESSION['login_user'] = $user;

header("location: index.php");
}
}
?>
<form action="" method="post">
<label>UserName :</label>
<input type="text" name="user"/><br />
<label>Password :</label>
<input type="password" name="pass"/><br/>
<input type="submit" value=" Submit "/><br />
</form>

header("location: index.php");
exit();

$user = $koneksi->prepare("SELECT * FROM user ".$addonq."");

$user = $koneksi->prepare("SELECT * FROM user ".$addonq);