View file game/start.php

<?php

include'inc/conf.php';
session_start();


$title='Вход в игру';


include'inc/conf.php';


$login=htmlspecialchars(mysql_real_escape_string(trim($_GET['login'])));

//$pass=strlen($_POST['pass']);
$pass=htmlspecialchars(mysql_real_escape_string(trim($_GET['password'])));

/////////////////Проверка ВВОДA//////////////



//////////////////////

$sql = mysql_query("SELECT * FROM `users` WHERE `login` = '".$login."' ");
$row = mysql_fetch_array($sql);

if($row['pass']==md5($pass)){


$_SESSION['id'] = $row['id'];
 $_SESSION['pass'] = $pass;
header("Location: city.php");

}else{

header("Location: aut.php?er=er");

}





?>