<?php
include'config.php';
session_start();
$error='';
$user ='';
if(isset($_POST['user']) && isset($_POST['pass'])){
    $r = $conn->prepare("SELECT * FROM users WHERE username=? AND password=?");
    $verify = md5($_POST['pass']);
    $pass = hash('sha256', $verify);
    $r->bind_param("ss", $_POST['user'], $pass);
    $r->execute();
    $result = $r->get_result();
    //$r->store_result();
    if($row =  $result->fetch_array(MYSQLI_ASSOC)){
        //var_dump($row);
        if($row['level'] == '1')
        $_SESSION['admin']='true';
        $_SESSION['id'] = $row['id']; // If I echo the session id  its works.
        $_SESSION['user'] =  $row['username']; //  if i echo the session username its not working.
        echo "<script>window.location=\"index.php\";</script>";
    } else { $error='1'; }
}