<?php

session_start();
$pass = $_POST['pass'];
$id   = $_POST['id'];


if ($pass&&$id) {
$connect = mysql_connect("localhost","root","") or die("Could not connect to  the database");
mysql_select_db("aiita") or die("Database not exist");

$query = mysql_query("SELECT * FROM attestation WHERE pass='$pass' ");
$numrows = mysql_num_rows($query);

if ($numrows!==0) {
    while($row = mysql_fetch_assoc($query))
    {
        $dbpass = $row['pass'];
        $dbid   = $row['id'];

    }
    if ($pass==$dbpass&&$id== $dbid) {

        $queryimage = mysql_query("SELECT images FROM 'attestation' WHERE      'id'=$id ");


        @$_SESSION['id']=$id;
    }

    else
        echo ".......";
}
else
    die("...............");
}
else
die(".......");
?>