<?php
 include("../includes/db.php");
 if(isset($_POST['submit']))
 {
 $user = mysql_real_escape_string($_POST['user']);
 $pass = mysql_real_escape_string($_POST['pass']);
 $pass = md5($pass);
$login = mysql_query("SELECT * FROM admin WHERE username='$user' AND password='$pass'");
if(mysql_num_rows($login) > 0)
{
setcookie("login", $user, time()+3600);
header("location: home.php");
}
}
 ?>
 <div align="center">
 <form action="index.php" method="POST">
 <table>
 <td>Username:<input type="text" name="user"></td>
 <tr></tr>
 <td>Password:<input type="password" name="pass"></td>
<tr></tr>
<td><input type="submit" name="submit" value="Login"></td>
<tr></tr>
</table>
</form>
</div>