<?php
$db_host = "localhost";
$db_username = "izzydog";
$db_name = "challenge1";
$db_password = "jumphost";
$tbl_name = "database1"; // Table name]
$database1 = 'database1';


// Connect to server and select database.
$conn = mysql_connect("localhost", "izzydog", "jumphost")or die("cannot connect");
mysql_select_db("challenge1",$conn)or die("cannot select DB");



// username and password sent from form

$myusername=$_POST['myusername'];
$mypassword=$_POST['mypassword'];

// To protect MySQL injection (more detail about MySQL injection)
$myusername = stripslashes($myusername);
$mypassword = stripslashes($mypassword);
$myusername = mysql_real_escape_string($myusername);
$mypassword = mysql_real_escape_string($mypassword);

$sql="SELECT * FROM $database1 WHERE username='$myusername' AND password='$mypassword'";
$result=mysql_query($sql);

// Mysql_num_row is counting table row
$count=mysql_num_rows($result);
// If result matched $myusername and $mypassword, table row must be 1 row


if($count==1){
session_register('myusername');
session_register('mypassword');
header('location:login_success.php');
}
else {
echo 'Wrong Username or Password';
}

?>