Untitled

<?php
session_start();
require_once('db.php');

$error = '';

if (empty($_POST['user']) || empty($_POST['pass'])){
    $error = 'Mõlemad väljad peavad olema täidetud';
} else {
    $user = $_POST['user'];
    $pass = $_POST['pass'];

    $query = mysqli_query($connection, "SELECT * FROM user WHERE username = '$user' and password = '$pass' ");
 if (mysqli_num_rows($query) == 1) {
     $_SESSION['user'] = $user;
    header('Location: index.php');
    exit;
} else {
    $error = 'Kasutajanimi või parool oli vale';

}

}


?>


<!doctype html>
<html>
<head>
    <meta charset="utf-8">
    <title>Logi sisse </title>
</head>

<body>
<h1> Logi sisse</h1>
<a href="index.php"> Tagasi </a>
    <p style="color:red;"><?=$error?></p>
    <form method="post">
        <input type="text" name="user" placeholder="Username">
        <input type="password" name="pass" placeholder = "Password">
        <button>Logi sisse </button>
    </form>


</body>
</html>