if (isset($_POST['login-uname'])) {
  $loginUsername=$_POST['login-uname'];
  $pw_md5 = md5($_POST['login-passwort']);
  $password=$pw_md5;
  #$pw_md5 = $_POST['login-passwort'];
  $MM_fldUserAuthorization = "";
  $MM_redirectLoginSuccess = "main.php";
  $MM_redirectLoginFailed = "index.php#failed";
  $MM_redirecttoReferrer = true;
  mysql_select_db($database_ccp, $ccp);

  $LoginRS__query=sprintf("SELECT Name, Passwort FROM players WHERE Name=%s AND Passwort=%s",
    GetSQLValueString($loginUsername, "text"), GetSQLValueString($pw_md5, "text"));

  $LoginRS = mysql_query($LoginRS__query, $ccp) or die(mysql_error());
  $loginFoundUser = mysql_num_rows($LoginRS);
  if ($loginFoundUser) {
     $loginStrGroup = "";

    //declare two session variables and assign them
    $_SESSION['MM_Username'] = $loginUsername;
    $_SESSION['MM_UserGroup'] = $loginStrGroup;

    if (isset($_SESSION['PrevUrl']) && true) {
      $MM_redirectLoginSuccess = $_SESSION['PrevUrl'];
    }
	$_SESSION['uname'] = $_POST['login-uname'];
    header("Location: " . $MM_redirectLoginSuccess );
  }
  else {
    header("Location: ". $MM_redirectLoginFailed );
  }