// Query
$query = "SELECT * FROM user WHERE username = '$user' AND password = '$pswd'";
$result = mysql_query($query,$conn);
if (!$result)
{
die("Errore nella query : $query " . mysql_error());
}
// Check
$record = mysql_fetch_array($result);
if ($record['username'] == $user && $record['password'] == $pswd)
{

	$_SESSION['id'] = $record['id'];							// id
	$_SESSION['username'] = $record['username'];				// Username
	$_SESSION['password'] = $record['password'];				// Password
	$_SESSION['admin'] = $record['admin'];						// Lvl Admin
	$_SESSION['skin'] = $record['skin'];						// Player Skin
	$_SESSION['kills'] = $record['kills'];						// Kills
	$_SESSION['deaths'] = $record['deaths'];					// Deaths
	$_SESSION['money'] = $record['money'];						// Money
	$_SESSION['dmoney'] = $record['dmoney'];					// Bank Money
	$_SESSION['vip'] = $record['vip'];							// ViP user
	$_SESSION['weapons'] = $record['weapons'];					// Weapons
	$_SESSION['vehicles'] = $record['vehicles'];				// Vehicle
	$_SESSION['vehicles_color'] = $record['vehicles_color'];	// Vehicle color
	$_SESSION['email'] = $record['email'];						// Email
	$_SESSION['mute'] = $record['mute'];						// Mute
	$_SESSION['banned'] = $record['banned'];					// Bannato

    header("location: ucp/index.php");
}else{
	$msg = urlencode("Username and / or Password is incorrect");
	header("location: index.php?msg=$msg");
	die("Username and / or Password is incorrect");

}