if(mysql_num_rows(mysql_query("SELECT username, password FROM users WHERE username='$user' AND password='$pass'")))
    {
        $_SESSION['user'] = $user;
        header("Location:welcome.php");
    }

    else
    {
        echo "Invalid username and/or password";
    }