<?php
include "config.php";
include "header.php";
?>

<?php

if($_POST['Login']=='Login'){
	$sqlr = "select count(customerid) as cId from customer where ";
	$sqlr .= " username = '".$_POST["username"]."' and ";
	 $sqlr .= " password = '".$_POST["password"]."' ";
	 $resultr = mysqli_query($dbconn ,$sqlr);
		 $rowr = mysqli_fetch_assoc($resultr);
			mysqli_free_result($resultr);
	if($rowr['cId'] >=1){
		echo '<script>alert("login is successfull")</script>';
		$_SESSION["username"] = $_POST["username"];
		echo '<script>window.location = "search.php";</script>';
	} else{
		echo '<script>alert("invalid password or username!!!!")</script>';
	}
}
?>
<form method="post"  >
<table>
            <tr><td>User name:</td><td><input name="username" type = "text" ></td></tr>
			<tr><td>Password:</td><td><input name="password" type="password" ></td></tr>
</table>

<input type="submit" name="Login" value="Login">
<input type="reset" value="Reset">

</form>
</body>

</html>