<?php

//Database Information

$dbhost = "localhost";
$dbname = "x";
$dbuser = "x";
$dbpass = "x";

//Connect to database

mysql_connect ( $dbhost, $dbuser, $dbpass)or die("Could not connect: ".mysql_error());
mysql_select_db($dbname) or die(mysql_error());

session_start();
$username = mysql_real_escape_string($_POST[‘username’]);
$password = $_POST[‘password’];

$query = "SELECT * FROM users
where username=’$username’
and password=’$password’";

$result = mysql_query($query);

if (mysql_num_rows($result) != 1) {
$error = “Bad Login”;
    include “login.html”;

} else {
    $_SESSION[‘username’] = “$username”;
    include “memberspage.php”;
}

?>