<?php
if(isset($_POST['login'],$_POST['password'])) {
$res = q ("
SELECT *
FROM `users`
WHERE `login` = '".es($_POST['login'])."'
AND `password` = '".myHash($_POST['password']."'
LIMIT 1
");
if(mysqli_num_rows($res)) {
$_SESSION['user'] = mysqli_fetch_assoc($res);
$status = 'ok';
} else {
$error = '<span class="red">Данная комбинация логина и пароля не найдена</span>';
}
}