<?php
session_start();
include'config.php';

$error='';
$user ='';
if(isset($_POST['user']) && isset($_POST['pass'])){
    $r = $conn->prepare("SELECT * FROM users WHERE username=? AND password=?");
    $verify = md5($_POST['pass']);
    $pass = hash('sha256', $verify);
    $r->bind_param("ss", $_POST['user'], $pass);
    $r->execute();
    $result = $r->get_result();
    if($row =  $result->fetch_array(MYSQLI_ASSOC)){
        if($row['level'] == '1')
        $_SESSION['admin']='true';
        $_SESSION['id'] = $row['id'];
        $_SESSION['username'] =  $row['username'];
    } else { $error='1'; }
}

if(isset($_SESSION['admin'])) {

    echo 'HAVE';
} else { echo 'dont have';}
 ?>