$user = $_POST['user'];
	$pass = $_POST['pass'];

	if ($user == mysql_real_escape_string($user) && $user<>"" ) {
		$pass=encryptData($pass); // a nice encrypted password :)
	} else {
		showLoginScreen(true); // the login failed!
	}

	$SQL = "SELECT * FROM `users`
		WHERE password='".$pass."' AND
			username='".$user."';";