GMWeb/www-admin/login.php

<?php
    include("functions.php");
    $con = startdb();
    $user = mysqli_real_escape_string($con, $_POST["user"]);
    $pass = mysqli_real_escape_string($con, $_POST["pass"]);
    $pass = sha1($pass);
    if (login($con, $user, $pass)){
        header("Location: /main.php");
    }
    else{
        header("Location: /index.php");
    }
?>