<Form Name ="form1" Method ="POST" ACTION = "login.php">

<label>Username: </label>
<input type="text" name="pat_username" id="username" required="required" placeholder="username"/><br/><br />

<label>Password: </label>
<input type="password" name="pat_password" id="password" required="required" placeholder="password"/><br/><br />

<input type="submit" value=" Submit " name="submit"/><br />

</form>

<?php
if(isset($_POST["submit"])){
$servername = "localhost";
$username = "root";
$password = "password";
$dbname = "hospital";

// Create connection
$conn = new mysqli($servername, $username, $password, $dbname);

Check connection
    if ($conn->connect_error) {
            die("Connection failed: " . $conn->connect_error);
    }


  $username = mysqli_real_escape_string($_POST['pat_username']);
  $password = mysqli_real_escape_string($_POST['pat_password']);

  $result = mysqli_query($connect, "SELECT * FROM patients WHERE patient_username='".$username."' AND patient_password='".$password."' AND activate='0'");

  if ($result->num_rows) {
      echo "login successfull";
      }

    else

        {
            echo "login unsuccessfull, please try again";
        }
$conn->close();
}
?>