//Login Script

//Pull variables from form on home page
    $user = $_POST['user'];
    $pass = $_POST['password'];

//SQL query to decrypt password with a salt
    $query = "SELECT * FROM personnel WHERE pers_user = '$user' AND AES_DECRYPT(pers_password, 'pol') = '$pass' LIMIT 0, 30 ";
    $result = mysql_query($query);

//If it returns a result, assign the sessions username as whats in the database
    if (@mysql_num_rows($result) > 0) {
        session_unset();
        session_start();
            while ($row = mysql_fetch_assoc($result)) {
                $_SESSION['pers_cac'] = $row['pers_cac'];
                $_SESSION['pers_id'] = $row['pers_id'];
                $_SESSION['pers_fullname'] = $row['pers_fullname'];
                $_SESSION['pers_rank'] = $row['pers_rank'];
            }

//Easy way to make sure a user is logged in, assign variable to 1
    $_SESSION['logged'] = 1;

//Content after submittion
    echo "<META HTTP-EQUIV=Refresh CONTENT='0; URL=index.php'>";

} else {

//Bad credentials
    echo "Incorrect password";
}