LittleDemon WebShell

<?php 
if(isset($_POST['login']))
	{
			include('config.php');
			session_start();
			$username=$_POST['username'];
			$password=$_POST['password'];
			$query=mysqli_query($link,"select * from reg_member where username='$username' and r_type='member'");
			$row=mysqli_fetch_array($query);
			$pass=$row['password'];
			
			if($password==$pass)
			{
				$_SESSION['samaj_member']=$row['m_id'];
				header("location:index.php?err=2");
			}
			else
			{
				unset($_SESISON['samaj_member']);
				header("location:login.php?err=1");
			}
	}

include('header.php'); 
if(isset($_GET['err']))
{
$msg=$_GET['err'];
if($msg==1)
{
?>
<script>
	swal('Fail!', 'Oops. Something went wrong!', 'error');
	 </script>
<?php
}

} 

?>
		<br>

			<section id="ccr-contact-form">
				<p>Member Login</p>
				<form action="login.php" method="post" id="commentform">
					<input id="author" name="username" type="text" placeholder="Username" value="" required >
					<input id="email" name="password" type="password" placeholder="Password" value="" required>
					
					<input name="login" type="submit" id="submit" value="Submit">
					
				</form> <!-- /#commentform -->
					
			</section> <!-- /#ccr-contact-form -->

		
		<?php include('footer.php');

 ?>