if (isset($_POST['submit'])){
/*$role1 = stripslashes($_REQUEST['role']);
//escapes special characters in a string
$role1 = mysqli_real_escape_string($conn,$role1);
// removes backslashes
$username = stripslashes($_REQUEST['username']);
//escapes special characters in a string
$username = mysqli_real_escape_string($conn,$username);
$password = stripslashes($_REQUEST['password']);
$password = mysqli_real_escape_string($conn,$password);*/
$username=$_POST['username'];
$password=$_POST['password'];
$password = md5($password);
//Checking is user existing in the database or not
$query = "SELECT * FROM user WHERE username='$username' AND password='$password' AND status = 1";
$result = mysqli_query($conn,$query)or die (mysqli_error());
$row = mysqli_fetch_array($result);
if(mysqli_num_rows($result) > 0)
{
$_SESSION["username"] = $row['username'];
// Redirect user to index.php
echo "";
}
else{
echo "