Untitled

<html>
<head>
	<meta charset="UTF-8">
</head>
<body>
	<form action="index.php" method="POST">
		Login: <input type="text" name="login"><br>
		Hasło: <input type="text" name="haslo"><br>
		<input type="submit" value="Zaloguj"><input type="reset" value="Wyczyść"><br>
	</form>
</body>
</html>
<?php
	error_reporting(0);
	$db = mysqli_connect("localhost", "root", "", "bazahehe");

	$login1 = $_POST['login'];
	$haslo1 = $_POST['haslo'];

	$haslozak = md5($haslo1);

	$sql = "SELECT * FROM users WHERE login = '$login1' AND password = '$haslozak'";
	$wynik = $db->query($sql);
	$xd = mysqli_num_rows($wynik);
	if($xd != 0)
	{
		echo "Zalogowano pomyślne, witaj $login1!";
	}
	else
	{
		echo "Zły login lub hasło";
	}
?>