imran

<?php
session_start();
require_once('includes/db.php');

$username = mysqli_real_escape_string($_POST['username']);
$password = mysqli_real_escape_string($_POST['password']);



$query = "SELECT * FROM user WHERE username='$username' AND password='$password'";
$result = mysqli_query($conn, $query);
$row = mysqli_fetch_array($result,MYSQLI_ASSOC);
if(mysqli_num_rows($result) == 1){
	$_SESSION['user'] = $row['username'];
	header("Location:dashboard.php");

}
mysqli_close($conn);
?>