query("SELECT password, userid FROM user where name='$_POST[name]'");
$row=$query->fetch();
$dbpass=$row["password"];
$dbuserid=$row["userid"];
// $userpass= hash('sha512', $_POST["password"]);
$userpass= $_POST['password'];
if ($dbpass==$userpass)
{
session_start();
$_SESSION["username"]=$_POST["name"];
$_SESSION["userid"]=$dbuserid;
$query=$db->query("INSERT INTO login(login,username) VALUES(NULL,'$_SESSION[username]')");
header("Location: index.php");
}
else
{
$echo[$userpass];
//header("Location: wronglogin.php");
}
}
?>