userlogin.php

	
 

<?php   
 session_start();  
 $connect = mysqli_connect("localhost", "root", "", "sampath_store");  
 

 
$message="";
 

if(isset($_POST['submit'])){ 

if(count($_POST)>0) {
 include 'DBconnection.php';
	
$result = mysqli_query($conn,"SELECT * FROM tbl_customer WHERE email='" . $_POST["username"] . "' and password = '". $_POST["password"]."'");
$row  = mysqli_fetch_array($result);

if(is_array($row)) {
$_SESSION["id"] = $row['CustomerID'];
$_SESSION["name"] = $row['CustomerName'];
$_SESSION["email"] = $row['email'];	
} else {
header("Location:account.php") ;
  $message = "Invalid Username or Password!";
}
}
if(isset($_SESSION["id"])) {
header("Location:customerindex.php");
}

}
	?>