Untitled

<?php
  require_once 'header.php';


  $error = $user = $pass = "";

  if (isset($_POST['user']))
 {
   $user = sanitizeString($_POST['user']);
   $pass = sanitizeString($_POST['pass']);

     if ($user == "" || $pass == "")
     $error = "<span class='melding'>Iets vergeten?</span><br>";
     else
   {
    $result = queryMySQL("SELECT user,pass FROM members
    WHERE user='$user' AND pass='$pass'");

  if ($result->num_rows == 0)
  {
    $error = "<span class='melding'>Gebruikersnaam/Wachtwoord
              is niet correct.</span><br><br>";
  }
     else
     {
       $_SESSION['user'] = $user;
       $_SESSION['pass'] = $pass;

        header ('Location: /index.php');

      }
   }
  }

<?php
session_start();

  echo "<!DOCTYPE html><html><head>";


 require_once 'functions.php';


 if (isset($_SESSION['user']))
{
 $user     = $_SESSION['user'];

$loggedin = TRUE;
$userstr  = " ($user)";
 }
else $loggedin = FALSE;

 echo "<title>$appname</title><link rel='stylesheet' " .
   "href='css/styles.css' type='text/css'>"  .
   "<link rel='shortcut icon' type='image/png' href='img/favicon.png'
sizes='110x100'>"  .

   "<link href='photouploadjquery/fileinput.css' media='all'
rel='stylesheet' type='text/css' />"      .
   "<script
src='http://ajax.googleapis.com/ajax/libs/jquery/2.1.1/jquery.min.js'>
</script>"     .
   "<script src='photouploadjquery/fileinput.js' type='text/javascript'>
</script>"    .
   "<script
src='https://maxcdn.bootstrapcdn.com/bootstrap/3.3.4/js/bootstrap.min.js'
type='text/javascript'></script>"    .

     "<script src='javascript.js'></script>" .

     "</head><body>"      ;


if ($loggedin)
{
echo  showUserSmall($user);
 }

  else
{
    echo

    file_get_contents ("includes/header.php" );


}