Online PHP editor | refs for AtEjZ

<?php if($user == "" || $pass == "") { echo "Please fill in all the information!"; } //Check to see if the username AND password MATCHES the username AND password in the DB else { $query = mysqli_query($con,"SELECT * FROM members WHERE username = '$user' and password = '$pass'") or die("Can not query DB."); $count = mysqli_num_rows($query); if ($count == 1) { $_SESSION['username']=$user; //Create a session for the user! header ("location: members.php"); } else{ echo "Username and Password DO NOT MATCH! TRY AGAIN!"; } }