<?php
$feedback = "";

if(!empty($_SESSION['LoggedIn']) && !empty($_SESSION['Username']))
{

}
elseif(!empty($_POST['username']) && !empty($_POST['password']))
{
	 $username = mysql_real_escape_string($_POST['username']);
    $password = md5(mysql_real_escape_string($_POST['password']));

	 $checklogin = mysql_query("SELECT * FROM users WHERE Username = '".$username."' AND Password = '".$password."'");

    if(mysql_num_rows($checklogin) == 1)
    {
    	include "includes/loggedin.php";

   }
    else
    {

        $feedback = "Sorry, your account could not be found. Please try again.";
    }
}
else
{
	  $feedback =  " ";
}?>