<?php
 session_start(); 
 
 
require('db.php');

?>
<?php
	  
$myusername = $_REQUEST['username'];
$mypassword = $_REQUEST['password'];

$username = filter_var($myusername, FILTER_SANITIZE_SPECIAL_CHARS);
$password = filter_var($mypassword, FILTER_SANITIZE_SPECIAL_CHARS);
$username = mysqli_real_escape_string($db, $myusername);
$password = mysqli_real_escape_string($db, $password);

$sqlQuery = "SELECT * FROM  admin WHERE username='$username' AND password='$password'";
$result = mysqli_query($db, $sqlQuery);
$countrecord = mysqli_num_rows($result);

if($countrecord==1)


{
    $fetch = mysqli_fetch_assoc($result);
$i = 0;
$_SESSION['varusername'] = $fetch["username"];


require("adminlog.php");

} else {


require("invalidlogin.php");

}
?>