//Opens connection to database
$connection = mysql_connect("localhost", "bagofdus_david", "00871992");

//Selects database
mysql_select_db("bagofdus_schoolStudent");

//Srores username and password in two variables
$username=$_POST["usernameText"];
$password=$_POST["passwordText"];

//Sql injection protection, prevents extra characters
$user=mysql_real_escape_string($username);
$pass=mysql_real_escape_string($password);

//Query selects relevant record from the database
$query=mysql_query("SELECT * FROM student where username= $username AND password= $password");

//Checks that username and password are in the same row
$count=sizeof($query);
if($count==1)
    {
  $hour = time() + 3600;

 //Sets a one hour cookie
 setcookie(username, $_POST['username'], $hour);
 setcookie(password, $_POST['password'], $hour);
 echo "Login Successful";

 //Redirects to the homepage
 header("home.html");

}
else
{
echo "Username or password is incorrect";
}
?>