<?php

    session_start();

    $username = $_POST['username'];
    $password = $_POST['password'];

    if ($username&&$password){

            $connect = mysql_connect("mysql5.000webhost.com","a2148621_jon","blaster123") or die ("Could not connect to database.");
            mysql_select_db("a2148621_login") or die ("Could not find database.");

            $query = mysql_query("SELECT * FROM login WHERE username='$username' AND password='" . md5($password). "'") or die(mysql_error());
            $numrows = mysql_num_rows($query);

            if($numrows ==1){
                echo "Login successful. <a href='membersarea.php'>Click here to enter the members area</a>";
                $_SESSION['username']=$dbusername;
            }
            else {
                echo "Incorrect password.";
            }
    }
    else
            die ("Please enter a username and password.");
?>