login.php

<?php
    ob_start();
    session_start();

    $servername = "localhost";
    $username = "root";
    $password = "";
    $dbname = "login";
    $table = "login";

    $open = mysqli_connect($servername, $username, $password, $dbname);
    if(!$open){
        die("Koneksi ke Engine mySQL gagal");
    }

    $user = $_POST['user'];
    $pass = $_POST['password'];

    $_SESSION['user']=$user;

    $sql = "SELECT * FROM $table WHERE user = '$user'";
    $query = mysqli_query($open,$sql);
    $num = mysqli_num_rows($query);
    $row = mysqli_fetch_array($query);

    if($num==0 OR $pass!=$row['password']){
        echo "password salah";
    }else{
        $_SESSION['login'] = '1';
        header("location:home.php");
    }
    mysqli_close($open);
?>