I just started getting into php recently and I wanted to create a simple login with(out any SQL (haven't learned it yet :$). So Here is my code for login page:
<form action="index.php" method="post">
Username<input type="text" name="user" /> <br />
Password<input type="password" name="pass" /> <br />
<input type="submit" />
</form>
<?php
$username = username;
$password = password;
$iusername = $_POST["user"];
$ipassword = $_POST["pass"];
if ($username==$iusername && $password==$ipassword) {
include('../0340791aacd04a07560cd7dc983ed98e.php');
}else{
echo 'Incorrect pass';
}
?>
Now the problem is,