<?php
$host="localhost"; // Host name
$username="root"; // Mysql username
$password=""; // Mysql password
$db_name="tafe"; // Database name
$tbl_name="users"; // Table name

// Connect to server and select databse.
mysql_connect("$host", "$username", "$password")or die("cannot connect");
mysql_select_db("$db_name")or die("cannot select DB");

// username and password sent from form
$myusername=$_POST['myusername'];
$mypassword=$_POST['mypassword'];

// To protect MySQL injection (more detail about MySQL injection)
$myusername = stripslashes($myusername);
$mypassword = stripslashes($mypassword);
$myusername = mysql_real_escape_string($myusername);
$mypassword = mysql_real_escape_string($mypassword);
$encrypted_mypassword=md5($mypassword);

$sql="SELECT * FROM $tbl_name WHERE username='$myusername' and password='$encrypted_mypassword'";
$result=mysql_query($sql);
$row=mysql_fetch_assoc($result); // Grab the row

// Mysql_num_row is counting table row
$count=mysql_num_rows($result);
// If result matched $myusername and $mypassword, table row must be 1 row

if($count==1){
    // Register $myusername, $mypassword and redirect to file "login_success.php"
    session_register("myusername");
    session_register("mypassword");

    // Check user types
    if ($row['type'] == 'user') { // User logged in send to user page
        header("location:login_success.php");
    } elseif ($row['type'] == 'admin') { // Admin logged in send to admin page & set admin session
        $_SESSION['admin'] = true; // sets the admin session
        header("location:admin_page.php");
    }

}
else {
echo "Wrong Username or Password".'<a href="index.php"> Click here to go back to Home



</a>';
}
?>


<SCRIPT language="JavaScript">

 function getgoing()
  {
    top.location="index.php";
   }

   if (top.frames.length==0)
    {

     setTimeout('getgoing()',2500);
     }

</SCRIPT>