php login

<?php
session_start();
include('../incl/db_connect.php');
$user = $_POST['bruger'];
$pass = $_POST['password'];


$sql = "SELECT username, password, user_id, status FROM users WHERE username = '$user' AND password = '$pass'";

$res = $connect->query($sql);
$row = $res->fetch_assoc();


if($row['username'] <> "" && $row['password'] <> "" && $row['status'] == 1){
	$_SESSION['bruger'] = $row['user_id'];
	header('location:../profil.php');
}elseif ($row['username'] <> "" && $row['password'] <> "" && $row['status'] == 2){
	$_SESSION['bruger'] = $row['user_id'];
	$_SESSION['admin'] = 1;
	header('location:../admin.php');
}else {
	header('location:../login.php');
}









?>