<?php
include 'dbconnect.php';
if(isset($_POST["login"])){
 if(!empty($_POST['uname']) && !empty($_POST['pwd'])){
 $user = $_POST['uname'];
 $pass = $_POST['pwd'];
 
 $query = mysqli_query($conn, "SELECT * FROM login WHERE uname='".$user."' AND pwd='".$pass."'");
 $numrows = mysqli_num_rows($query);
 if($numrows !=0)
 {
 while($row = mysqli_fetch_assoc($query))
 {
 	$userid=$row['id'];

 $dbusername=$row['uname'];
 $dbpassword=$row['pwd'];
 }
 if($user == $dbusername && $pass == $dbpassword)
 {
 session_start();
 $_SESSION['sess_user']=$user;
     $_SESSION['id'] = $userid;

 header("Location:dashboard.php");
 }
 }
 else
 {
 	echo "<script> alert('Invalid username or password'); window.location.href='index.php'; </script>";

 
 }
 }
 else
 {
 	echo "<script> alert('Please enter username and password'); window.location.href='index.php'; </script>";
 }
}

?>