validasi

<?php
session_start();
include "koneksi.php";

$user = $_POST['user'];
$pass = $_POST['pass'];

$mysql = mysql_query("SELECT * FROM login WHERE user='$user' AND pass='$pass'");

$xxx=mysql_num_rows($mysql);
if($xxx==TRUE){

$_SESSION['user'] = $user;
echo "<script>window.alert('Login Berhasil');
window.location=('read.php')
</script>";

}else{

echo "<script>window.alert('Username atau Password Salah');
window.location=('login.php')
</script>";
}
?>