<?
session_start();
require_once('secure/database.php');
$tbl_name="users"; // Table Name

$logusername=mysql_real_escape_string($_POST['username']); //Grab username
$logpassword=mysql_real_escape_string(md5($_POST['password'])); //Grab password and encrypt to md5
$ip = $_SERVER['REMOTE_ADDR']; //ip

$logsubmit=$_POST['login']; //Grab form post

@mysql_select_db($database) or die( "Unable to select database"); //database error

if ($logsubmit == "login") //login check
    {

    $check = mysql_query("SELECT * FROM users WHERE username = '$logusername'") or die(mysql_error());
    $num=mysql_num_rows($check);

    while($info =mysql_fetch_array( $check ))
        {
        if ($logpassword==$info['password']) //username + password check
            {
            $_SESSION['login'] = "1";
            $_SESSION['uname'] = "$logusername";
            $_SESSION['pword'] = "$logpassword";
            $_SESSION['ip'] = "$ip";
            $_SESSION['rank'] = $info['rank'];
            header ("location:home.php"); //login success
            }
        else
            {
            $_SESSION['login'] = "";
            header ("location:login.php"); //login success
            }

        }
    }
else die("$logsubmit error1"); //login check error message

mysql_close();
?>