<?php
if ($_POST["password"] {
    $loginname = $_POST["loginname"];
    $password = $_POST["password"];

    $sql="SELECT * FROM users WHERE Loginname = '".$loginname."' AND Password = '".$password."'";

    $rs = mysql_query($sql);

    if(!$rs) {
            $err=mysql_error();
            print $err;
            exit();
    }

    if(mysql_affected_rows()==0){
        print "Loginname/password was invalid. Please try again.";
    } else {
        $row=mysql_fetch_array($r);
        $user=$row["Username"];
        print "Login successful. (You are logged in as ".$user.".)";
    }
} else {
?>
<script language='javascript'>
function verifyMe(){
var msg='';

if(document.getElementById('loginname').value==''){
    msg+='- Username\n\n';}

if(document.getElementById('password').value==''){
    msg+='- Password\n\n';}

if(msg!=''){
    alert('The following fields are empty or invalid:\n\n'+msg);
    return false
}else{
    return true }

}
</script>
<form name='login' action='index.php' method='POST' enctype='application/x-www-form-urlencoded' onsubmit='return verifyMe();'>
<table class='table_form_1' id='table_form_1' cellspacing='0'>
    <tr>
        <td class='ftbl_row_1' ><LABEL for='loginname' ACCESSKEY='U' >Username
        </td>
        <td class='ftbl_row_1a' ><input type='text' name='loginname' id='loginname' size='45' maxlength='45'  value=''>
        </td>
    </tr>
    <tr>
        <td class='ftbl_row_2' ><LABEL for='password' ACCESSKEY='P' >Password
        </td>
        <td class='ftbl_row_2a' ><input type='password' name='password' id='password' size='45' maxlength='45'  value=''>
        </td>
    </tr>
    <tr>
        <td colspan='2' align='right'><input type='submit' name='submit' value='Submit'></td>
    </tr>
</table>
</form>
<?php } ?>