if(isset($_POST['login-submit'])) { $username=$_POST['mobilenumber_12']; $username = str_replace(' ', '', $username); $username = preg_replace('/\s/', '', $username); $password=$_POST['password']; $login = "SELECT * from shop_user WHERE (email= '$username' || username='$username') and password ='$password' and status='1'"; $resqry = mysql_query($login) or die("ERROR:".mysql_error()); $numrows = mysql_num_rows($resqry); if($numrows > 0) { $fetchqry=mysql_fetch_array($resqry); $userid=$fetchqry['user_id']; $username1=$fetchqry['email']; $username2=$fetchqry['name']; //session start //session_start(); $_SESSION["userid"]=$userid; $_SESSION["username1"]=$username1; $_SESSION["username2"]=$username2; header("location:product-view.php"); } else { header("location:login.php?error=error"); } } ?> if($_REQUEST['error']=='error') { ?>