<center>
<fieldset>
<legend>Přihlaš se</legend>
<form action="./login.php" method="post" />
<table>
<tr>
<td>Login:</td><td><input type="text" name="login" /><br /></td>
</tr>
<tr>
<td>Heslo:</td><td><input type="text" name="pass" /><br /></td>
</tr>
<tr>

</table>
<input type="submit" value="Vložit">
</form>
</fieldset>
<br />		
</center> 
Login.php :

<?php
include "./connect.php"; //nebudu sem dávat, je to zbytečné, pokud by to hrálo roli, napište
$login = mysql_real_escape_string($_POST["login"]);
$pass = mysql_real_escape_string($_POST["pass"]);

$dotaz = mysql_query("select * from web_users where login = '$login' and pass = '$pass'");
$overeni = mysql_num_rows($dotaz);
$row = mysql_fetch_array($dotaz);
$counter = 0;
if($overeni == 1) {
    session_start();
    $_SESSION['login'] = stripslashes($login);
    $_SESSION['id'] = $row["id"];
    header("Location: admin.php");
    die();
} else {
    echo "Zadal jsi špatný login/heslo";
}
?>