if(isset($_POST['login'])){

        $username = $_POST['user'];
        $password = $_POST['pass'];
        $username = stripslashes($username);
        $password = stripslashes($password);
        $username = mysqli_real_escape_string($conn, $username);
        $password = mysqli_real_escape_string($conn, $password);

        $select = "SELECT * FROM user WHERE user_brugernavn = '$username' AND user_password = '$password'";
        $query = mysqli_query($conn, $select);

        $num = mysqli_num_rows($query);

        if($num > 0){
            $row = mysqli_fetch_assoc($query);
            $_SESSION['navn'] = $row['user_navn'];
            $_SESSION['rolle'] = $row['user_role'];

            header("location:index.php");
        }
        else{
            echo "Brugernavn eller password er forkert";
        }
    }