Untitled

<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
<title>Jotorres Login Form</title>
</head>
<body>
    <form method="post" action="login.php" >
        <table border="1" >
        <tr>
            <td><label for="users_name">Username</label></td>
            <td><input type="text"
              name="users_name" id="users_name"></td>
        </tr>
        <tr>
            <td><label for="users_pass">Password</label></td>
            <td><input name="users_pass"
              type="password" id="users_pass"></input></td>
        </tr>
        <tr>
            <td><input type="submit" value="Submit"/>
            <td><input type="reset" value="Reset"/>
        </tr>
    </table>
</form>
</body>
</html>

<?php

// Grab User submitted information
$name = $_POST["users_name"];
$pass = $_POST["users_pass"];

// Connect to the database
$con = mysql_connect("localhost","username","password");
// Make sure we connected succesfully
if(! $con)
{
    die('Connection Failed'.mysql_error());
}

// Select the database to use
mysql_select_db("ist421test",$con);

$result = mysql_query("SELECT userName AND password FROM users_tbl WHERE userName = '$name'");

$row = mysql_fetch_array($result);

if($row["userName"]==$name && $row["password"]==$pass)
    echo"You are a validated user.";
else
    echo"Sorry, your credentials are not valid, Please try again.";
?>

"SELECT userName AND password FROM users_tbl WHERE userName = '$name'"
                 ^^^

"SELECT username, password FROM users_tbl WHERE username = '$name' AND password='$pass'"

<?php
DEFINE ('DB_USER', 'xxx');
DEFINE ('DB_PASSWORD', 'xxx');
DEFINE ('DB_HOST', 'xxx');
DEFINE ('DB_NAME', 'xxx');

$mysqli = @mysqli_connect (DB_HOST, DB_USER, DB_PASSWORD, DB_NAME)
OR die("could not connect");

if(isset($_POST['submit'])){
// Grab User submitted information
$name = mysqli_real_escape_string($mysqli,$_POST["users_name"]);
$pass = mysqli_real_escape_string($mysqli,$_POST["users_pass"]);

$result = mysqli_query($mysqli,"SELECT username, password FROM users_tbl WHERE username = '$name' AND password='$pass'");

$row = mysqli_fetch_array($result);

if($row["username"]==$name && $row["password"]==$pass){
    echo"You are a validated user.";
    }
else{
    echo"Sorry, your credentials are not valid, Please try again.";
    }

} // if(isset($_POST['submit'])){
?>

<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
<title>Jotorres Login Form</title>
</head>
<body>
    <form method="post" action="" >
        <table border="1" >
        <tr>
            <td><label for="users_name">Username</label></td>
            <td><input type="text"
              name="users_name" id="users_name"></td>
        </tr>
        <tr>
            <td><label for="users_pass">Password</label></td>
            <td><input name="users_pass" type="password" id="users_pass"></input></td>
        </tr>
        <tr>
            <td><input type="submit" name="submit" value="Submit"/>
            <td><input type="reset" value="Reset"/>
        </tr>
    </table>
</form>
</body>
</html>

SELECT COUNT(*) FROM `users_tbl` WHERE `userName` = '$name' AND `password` = '$pass'

$result = mysql_query("SELECT COUNT(*)
    FROM `users_tbl`
    WHERE `userName` = '$name' AND `password` = '$pass'");

if (!$result || mysql_num_rows($result) <= 0) {
    // NO user found!
} else {
    // User found and password matches
}

SELECT userName , password FROM users_tbl WHERE userName = '$name'