$ourLogin = "login";
$ourPassword = "pass";

session_start();

if ($_SESSION['login']!=$ourLogin && $_SESSION['password']!=$ourPassword) {


if ($_POST['login']==$ourLogin && $_POST['password']==$ourPassword) {


$_SESSION['login'] = $_POST['login'];
$_SESSION['password'] = $_POST['password'];
header("Location: index.php");


}
else {


echo "
<form action=index.php method=post>


Login:<br>
<input type=text name=login value=''><br>

Password:<br>
<input type=text name=password value=''><br>

<input type=submit value=' - ok - '>


</form>
";

exit;

}

}
$ourLogin = "login";
$ourPassword = "pass";