<?php
@session_start();
$username=$_POST["username"];
$password=$_POST["password"];
@include("assets/function/connectdb.php");

$sql_login="SELECT * FROM `users` 
WHERE `user_name` = '$username' 
AND `user_pass` LIKE '$password'";
$sql_query_login=mysqli_query($conn,$sql_login);
$sql_result_login=mysqli_fetch_array($sql_query_login);
if(isset($sql_result_login)){
    $_SESSION["user_name"]=$username;
    ?>
    <script>alert("ยินดีต้อนรับคุณ <?=$sql_result_login['user_name']?>")</script>
    <?php
    header("Refresh:1; url=manage/main.php");
}else{
    ?>
    <script>alert("ชื่อผู้ใช้หรือรหัสผ่านไม่ถูกต้อง")</script>
    <?php
    header("Refresh:1; url=login_form.php");
}
?>