<?session_start();
include "conninfo.php";

$un=$_POST["un"];
$pw=$_POST["pw"];

$query="SELECT * FROM login 
WHERE username like '$un'
AND password like '$pw'";

$result=mysqli_query($link,$query);
$numrows=mysqli_num_rows($result);//how many rows?

if($numrows==0)//no log in
{
	echo "Sorry, wrong details";?>
	<a href="landingpage.php">Back to home</a>
<?
}
else
{
$_SESSION["username"]=$un;//set up session variable
echo "Well done, you have logged in!";
echo "You can access the secret page";?>
<a href="secret.php">Secret page</a>
	
<?
}





?>