Login.php

   <html>
   <head>
   </head>
<body background="http://www.wallpaperweb.org/wallpaper/Games/1920x1200/deathwing_1920x1200.jpg"/>


    <?php
session_start();

include "dbConfig.php";

if ($_GET["op"] == "<strong class="highlight">login</strong>")
 {
 if (!$_POST["username"] || !$_POST["password"])
  {
  die("You need to provide <strong class="highlight">a</strong> username and password.");
  }


 $q = "SELECT * FROM `dbUsers` "
  ."WHERE `username`='".$_POST["username"]."' "
  ."AND `password`=PASSWORD('".$_POST["password"]."') "
  ."LIMIT 1";

 $r = mysql_query($q);

 if ( $obj = @mysql_fetch_object($r) )
  {

  $_SESSION["valid_id"] = $obj->id;
  $_SESSION["valid_user"] = $_POST["username"];
  $_SESSION["valid_time"] = time();


  Header("Location: members.php");
  }
 else
  {

  die("Sorry, could not log you in. Wrong <strong class="highlight">login</strong> information.");
  }
 }
else
 {

 echo "<form action=\"?op=login\" method=\"POST\">";
 echo "Username: <input name=\"username\" size=\"15\"><br />";
 echo "Password: <input type=\"password\" name=\"password\" size=\"8\"><br />";
 echo "<input type=\"submit\" value=\"Login\">";
 echo "</form>";
 }
?>
             </body>
</html>