admin.php

<?php
session_start();
if (!isset($_SESSION["ecoin"])) {
	header("Location:connect.php");
}
include "inc/header.php"; 
 ?>
 
 <div>
 	<h1>Welcom To Admin</h1>
 </div>


<?php include "inc/header.php"  ?>

connect.php

<?php
session_start();
const USER = "admin@admin.com";
const PASSWORD = "123456";
include "inc/header.php"; 
$u = (isset($_POST['user']))?$_POST['user']:null;
$p = (isset($_POST['pass']))?$_POST['pass']:null;

if ($u == USER && $p == PASSWORD) {
	echo '<h3 class="ok">OK</h3>';
	//echo md5($u);
	$_SESSION['ecoin'] = md5($u);
	header("Location:admin.php");
}else {
	echo '<h3 class="error">NOT WORK</h3>';
}


 ?>
 
<div class="login">	
<form action="" method="POST">	
<div class="input">
	User<input type="text" name="user">
</div>
<div class="input">
	Password<input type="password" name="pass">
</div>
<button type="submit">Login</button>
</form>
</div>

<?php include "inc/header.php"  ?>