login.php

<?php
	mysql_connect("localhost", "root", "") or die(mysql_error());
	mysql_select_db("unity") or die(mysql_error());

	$Username = mysql_real_escape_string($_POST['username']);
	$Password = mysql_real_escape_string($_POST['password']);

	//      Check to see if the user exits.
	$existsResult = mysql_query("SELECT username FROM members WHERE username ='$Username'");
	$num_rows = mysql_num_rows($existsResult);


	function cryptPass($input, $rounds = 9)
	{
		$salt = "";
		$saltChars = array_merge(range('A','Z'), range('a','z'), range(0,9));

		for($i = 0; $i < 22; $i++)
		{
			$salt .= $saltChars[array_rand($saltChars)];
		}
		return crypt($input, sprintf('$2a$%02d$', $rounds) . $salt);
	}

	if ($num_rows > 0)
	{
		if ($row = mysql_fetch_array( $existsResult ))
		{
			$registeredUser = $row['username'];
			$registeredEmail = $row['email'];
			$registeredPassword = $row['password'];

			$Password  = cryptPass($Password);

			if ($Password  == crypt($registeredPassword, $Password ))
			{
				echo "Success! Valid password";
			}
			else
			{
				echo "Incorrect username or password.";

			}
		}
	}
	else
	{
		die("No account under that username.");
	}
?>