if(isset($_POST['username']) && isset($_POST['password']))
{
	$username = $_POST['username'];
	$password = $_POST['password'];
	$result = mysql_query("SELECT * FROM bordel WHERE username='.$user.'");
	$num_rows = mysql_num_rows($result);
	if($num_rows != 0)
	{
		$result = mysql_query("SELECT * FROM bordel WHERE username='.$user.'");
		$row = mysql_fetch_array($result, MYSQL_ASSOC);
		if($row["password"] == md5($password))
		{
			echo "Yes";
		}
		else
		{
			echo "Login failed!";
		}
	}
	else
	{
		echo "User not found!";
	}
}
else
{
	echo "Empty password or username";
}