<?php
session_start();
include ("loginpswetc.php");

$user=$POST['user'];
$pass=$POST['pas'];

if ($user=="" or $pass=="") {
$ok=0;
echo"
<div align=center>
<br />
<form action=index.php method=POST>
User<br />
<input type=text name=user id=user></input><br /><br />
Pass<br />
<input type=password name=pas id=pas></input><br />
<br />
<input type=submit value=Go></input></form>
</div>
";

} else {

$ker=mysql_query("SELECT code FROM user WHERE username='$user'");
  while($psw=mysql_fetch_array($ker)); {
    if($pass==$psw[0]) {$ok=1;}
    else { echo"<div align=center><img src=error.jpg width=400 height=300></div>"; }
      }
}

if ($ok==1){ echo"working";

}

?>