Untitled

<?php
session_start();
include 'database_connector.php';

if(isset($_POST['submit']))
{
    $userName=$_POST['userName'];
    $passWord=$_POST['passWord'];
    $result=mysqli_query($con,"select *from Users where `userName` ='$userName' and `passWord` ='$passWord'");
    if($result)
    {
            //echo "Successfully deleted".$id;
            $count=mysqli_num_rows($result);
            //echo $count;
    }
    if($count==1)
    {
        $_SESSION['username']=$username;
        $_SESSION['passWord']=$passWord;
        header("location:users.php");
    }
    else
    {
        header("location:index.php");
    }
}
?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<link href="index.css" rel="stylesheet" type="text/css" />
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title>Sign in</title>
</head>
<body>
<div id="signin">
[ <a href="signup.php">Sign Up</a> ]
[ <a href="signin.php">Sign In</a> ]
</div>
<div id="clear"></div>
<div class="navbar">
<ul>
<li><a href="concerts.php" target="_self">Concert</a></li>
<li><a href="restaurants.php" target="_self">Restaurant</a></li>
<li><a href="sports.php" target="_self">Sports</a></li>
</ul>
</div>
<form name="signin" method="post" action="signin.php" id="form">
    Member Login <br /><br />
Username<input name="userName" type="text"><Br />
Password</td><input name="passWord" type="password"><br /><br />
<input type="submit" name="submit" value="submit">
</form>
</body>
</html>