<?php
$user = "admin";
$pass = md5($_POST['pass']);
$hash = "4322xxxxxxxxxxxxx";

if($user == "admin" && $pass == $hash)
{
header("Location: grantaccess.html");
}

else

{
$message='Please enter password';
echo '<script type="text/javascript">window.alert("'.$message.'");</script>';

if(isset($_POST))
{
?>
<style>
<?php include 'icss.css'; ?>
</style>

<form class="login" method="POST" action="index.php">
Please enter password<br> <input type="password" name="pass"></input>
<input type="submit" name="submit" value="SUBMIT"></input>
</form>
<?}
}
?>