<?php
  $username = $POST["username"];
  $password = $POST["password"];

  $username = stripcslashes($username);
  $password = stripcslashes($username);
  $username = mysql_real_escape_string($username);
  $password = mysql_real_escape_string($password);

  mysql_connect("localhost","root","");
  mysql_select_db("weigo_login");

  $result = mysql_query("select * from user where username = '$username' and password = '$password' ")
            or die("Fail to query database" . mysql_error());
  $row = mysql_fetch_array($result);
  if($row['username'] == $username && $row['password'] == $password){
    echo 'Login success!';
  }else{
    echo 'Login failed';
  }
?>