Insert

    <?php
    if(count($_POST) > 0){
        $servername = "localhost:3306";
        $username = "root";
        $password = "";
        $dbname = "fredle";
        $conn = new mysqli($servername, $username, $password, $dbname);
        if ($conn->connect_error) {
            die("Connection failed: " . $conn->connect_error);
        }
        date_default_timezone_set("Brazil/East");
        $sql = "SELECT * FROM login WHERE login='".md5($_POST['user'])."' AND password='".md5($_POST['pass'])."'";
        $_SESSION['result'] = $conn->query($sql);
        if($_SESSION['result']->num_rows>0){
            //Econtrado
            $hash=md5(rand());
            $sql = "INSERT INTO login ticket VALUES \"".$hash."\" WHERE login='".md5($_POST['user'])."' AND password='".md5($_POST['pass'])."'";
            $conn->query($sql);
            echo $hash;

        }else{
            //invalido
            echo "Fail";
        }
    }
    ?>