$query = @mysql_query('SELECT * FROM NOMBRETABLE WHERE user="'.mysql_real_escape_string($user).'" AND pass="'.mysql_real_escape_string($pass).'"');

if($existe = @mysql_fetch_object($query))

{

// Set de variables
$_SESSION['logged'] = 'yes';
$_SESSION['user'] = $user;
$_SESSION['rank'] = $existe->rank;

print_r($_SESSION);

}else{
include('fail.html');
}