View file funin/acp/valid.php

<?php
include("setup.php");
$confmpass=$_REQUEST["pp"];
$confmuser=$_REQUEST["uu"];
if($confmuser == "$user" & $confmpass == "$pass"){
$secret_password = md5("pass");
session_start();
	$_SESSION["user"]=$user;
header("Location: adminpanel.php?uu=$confmuser&token=$secret_password");
}
else
{
echo"login failed<br/>";
echo"<a href='index.html'>Login Again</a>";
}
?>