GMWeb/www-admin/login.php

<?php
    include('functions.php');
    $con = startdb();
    $user = mysqli_real_escape_string($con, $_POST['user']);
    $pass = mysqli_real_escape_string($con, $_POST['pass']);
        $pass = sha1($pass);
    if (login($con, $user, $pass)){
        header("Location: /main.php");
    }
    else{
        header("Location: /index.php");
    }
?>