Untitled

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta name = "viewport" content = "width = 320, initial-scale = .9, user-scalable = yes">
<link rel="stylesheet" type="text/css" href="css/style.css" />
<title>Login | AG</title>
</head>

<body>


<div class="wrapper">

<div class="login_box">
        <center>
                <h1>Login | AG</h1>

        <br/>

        <form action="login.php" method="post">
        <table>
               	<tr><td><b>Username:</b></td><td><input type="text" name="username"/></td></tr>
                <tr><td><b>Password:</b></td><td><input type="password" name="password"/></td></tr>
        </table>
        <input type="hidden" name="process_login" value="1"/>
        &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<input type="submit" value="Submit"/>
        </form>
        </center>
<?php

     	session_start();

        if(isset($_POST['process_login'])){
                include('php/db.php');

                $query = mysql_query("SELECT USERS.USERNAME, USERS.PASSWORD FROM USERS") or die (mysql_error());
                while ($result = mysql_fetch_array($query)){
                        if (strtoupper($_POST['username']) != $result['USERNAME'] || md5($_POST['password']) != $result['PASSWORD']){

                                echo "<center><font color=red>Incorrect username or password</font><center>";
                        }
                        else{
                             	$_SESSION['username'] = $_POST['username'];
                                #echo $_SESSION['username'];
                                #printr ($_SESSION);
                                echo "<script> window.location = \"home.php\"; </script>";
                        }
                        //echo $result['username'];
                }
        }

?>

</div>
</div>


</body>
</html>