Untitled

<?php
session_start();
?>
<html>
<head>
<style>
#login
{

    position:absolute;
    top: 30%;
    bottom: 30%;
    left:30%;
    right:30%;
    margin: 0px auto;
}

</style>
</head>
<body>
<?php


echo"<center>";
echo"<div id=\"login\">";

echo"<form method=\"POST\" action=\"connectivity.php\">";
echo"<b>Username</b>  <input type =\"text\" name=\"username\">";
echo"<br/><br/>";
echo"<b>Password</b>&nbsp;<input type =\"password\" name=\"password\">";
echo"<br/><br/>";
echo"<input type=\"submit\" value=\"submit\">";

echo"</div>";
echo"</center>";
?>

</body>
</html>


<?php
$username = $_POST['username'];
$password = $_POST['password'];
$host="localhost";
$uname="user";
$pword="";
$db="z1760359";
$conn=mysqli_connect($host,$uname,$pword,$db) or die("Oops something went  wrong");
session_start();

$query="Select firstName  from member where userName='$username' AND password='$password'";

if(!empty($_POST['username']))
{
$query_first=mysqli_query($conn,$query) or die(" Querry not retrieved");
//mysqli_error($query_first);
$query_second=mysqli_fetch_assoc($query_first);
$rows=mysqli_num_rows($query_second);
if($rows ==1)
{
    $_SESSION['user_name']=extract($query_second);
    echo"login successfull";
    sleep(3);
    header('Location:search.php');
}
else
{
    echo"Incorrect Password or Username";
}


}
else
{
echo"please enter the password or username";

}


?>