<?session_start(); //access the session data
include "conninfo.php";

$un=$_POST["username"];
$pw=$_POST["password"];

$query="SELECT * FROM users WHERE username like ? AND password like ?";

$stmt=mysqli_stmt_init($link);
mysqli_stmt_prepare($stmt,$query);
mysqli_stmt_bind_param($stmt,"ss",$un,$pw);
mysqli_stmt_execute($stmt);

mysqli_stmt_store_result($stmt);
$nr=mysqli_stmt_num_rows($stmt);


if($nr==0)//wrong login
{
echo "Sorry, wrong login details";?>
<br><br>
<a href="enterlogin.php">Please try again</a>
<?
}
else //correct login
{
echo "Thank you for logging in ";
$_SESSION["uname"] = $un; //set session variable	
echo $_SESSION["uname"];?>
<br><br>
<a href="secret.php">Go to Secret page</a>
<?
}














