<?session_start();//start or access existing session
include "conninfo.php";
//print_r($_POST);
$un=$_POST["uname"];
$pw=$_POST["pword"];

$query="SELECT * FROM users WHERE username like '$un' AND 
password like '$pw'";
$result=mysqli_query($link,$query);

$rows=mysqli_num_rows($result);


if($rows==1)//username and password was correct
{
$_SESSION["username"]=$un;

echo "You are logged in<br><br>";
echo "<a href='secret.php'>Go to secret page</a>";
}
else//wrong username and/or password
{
echo "Wrong username and password<br><br>";
echo "<a href='login.php'>Try again</a>";	
		
}







?>