<?session_start();//access sessions
include "../conninfo.php";//up a directory level
$uname=$_POST["username"];
$pword=$_POST["password"];

$query="SELECT * FROM people 
WHERE username like '$uname'
AND password like '$pword'";

$result=mysqli_query($link,$query);

$rows=mysqli_num_rows($result);//how many rows found

if($rows==0)//wrong details
{
echo "Sorry, wrong details!!!";	
}
else//correct details
{
$_SESSION["username"]=$uname;//set session variable
	
header("location:secret.php");	
}



?>