Untitled

<!doctype html>
<html lang="en">
<?php
ob_start();
include 'header.php';
session_start();
include 'dbconnect.php';
?>
  <head>
    <title>Inloggen</title>
    <meta charset="utf-8">
    <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">
    <link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0-beta.2/css/bootstrap.min.css" integrity="sha384-PsH8R72JQ3SOdhVi3uxftmaW6Vc51MKb0q5P2rRUpPvrszuE4W1povHYgTpBfshb" crossorigin="anonymous">
  </head>
  <body>
    <h1>Hello, world!</h1>
<div style="width:350px; border: solid 2px #333333; " align="left">
<form  method="post" action="">
<?php
if($_SERVER["REQUEST_METHOD"] == "POST")
	{
$username=mysqli_real_Escape_string($con,$_POST[gebruikersnaam]);
$uncryptedpassword=mysqli_real_Escape_string($con,$_POST[wachtwoord]);
$encryptedpassword=MD5($uncryptedpassword);

$sql="SELECT * FROM login WHERE username='$username' AND password='$password'";
$result=mysqli_query($con,$sql);
$row=mysqli_query($result);
$_session['gebruikersid']=$row['gebruikersid'];
$_session['permission']=$row['permission'];
$count=mysqli_num_rows($result);

if($count==1){
	if($row['permission']=="medewerker")
	{
		header ("location: medewerker.php");
	}
	else if ($row['permission']=="klant")
		header ("location: klant.php");
}

else{
echo "Sad, something went wrong xd.<br/>";
}
}
?>
<label> Gebruikersnaam </label> <input type="text" name="gebruikersnaam" class="box"/><br/>
<label> Wachtwoord </label> <input type="password" name="wachtwoord" class="box"/><br/>
<input type="submit" value="Inloggen"/>
</form>


    <script src="https://code.jquery.com/jquery-3.2.1.slim.min.js" integrity="sha384-KJ3o2DKtIkvYIK3UENzmM7KCkRr/rE9/Qpg6aAZGJwFDMVNA/GpGFF93hXpG5KkN" crossorigin="anonymous"></script>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.3/umd/popper.min.js" integrity="sha384-vFJXuSJphROIrBnz7yo7oB41mKfc8JzQZiCq4NCceLEaO4IHwicKwpJf9c9IpFgh" crossorigin="anonymous"></script>
    <script src="https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0-beta.2/js/bootstrap.min.js" integrity="sha384-alpBpkh1PFOepccYVYDB4do5UnbKysX5WZXm3XxPqe5iKTfUKjNkCk9SaVuEZflJ" crossorigin="anonymous"></script>
  </body>
</html>