<?php

session_start();

$username = $_POST['username'];
$password = $_POST['password'];

if ($username&&$password)
{
$connect = mysql_connect("localhost","root","") or die ("Couldn't connect");
mysql_select_db("phplogin") or die("Couldn't find db!");
$query = mysql_query("SELECT * FROM users WHERE username='$username'");
$numrows = mysql_num_rows($query);
}



else

die ("Please enter a username and password!");

if ($numrows!=0)

{
 //code to login
while ($row = mysql_fetch_assoc($query))
{
$dbusername = $row['username'];
$dbpassword = $row['password'];
}

// check to see if match

if ($username ==$dbusername&&$password==$dbpassword)
{

echo "You're in! <a href='member.php'> Click here to enter the member page.</a>";
$_SESSION ['username']=$username;

}

else

echo "incorrect password";

}
else
die ("That user doesn't exist!");



?>