<?php

$a = 'root';
$b = '123';

$login = (isset($_GET['login'])) ? $_GET['login'] : '';
$password =  (isset($_GET['password'])) ? $_GET['password'] : '';

if( ($login == $a) and ($password == $b) ) header('Location: ok.html');
    else echo 'sorry, bitch';