session

<?php
include"konek.php";
session_start();
$user=$_POST['user'];
$ok="ok";
$pass=$_POST['pass'];
$q1="select * from login;";
$q2=mysql_query($q1);
while($data=mysql_fetch_array($q2)) {
if($user==$data[user]&&$pass==$data[pass]
){
$_SESSION['user']="$user";
$_SESSION['pass']="$pass";
echo"<script>alert('data telah berhasil di input');
document.location.href='\admin/index.php'; </script>\n";
}else {$ok="ko";};
};
if($ok=="ko"){echo"password salah <a href=\"formlogin.html\">klik here</a>";}
?>