<?php

include 'functions.php';

if(isset($_POST['login']))

{
$username = $_POST ['username'];
$password = $_POST ['password'];

if (isset($username) && isset($password))
{
$dbUser = "root";
$dbPass = "";

 mysql_connect("localhost", $dbUser, $dbPass);
 mysql_select_db("user");
 $login = mysql_query("SELECT * FROM tbluser WHERE FirstName='$username'");
 if (! $login){
   echo 'Database error: ' . mysql_error();
}
 while ($row = mysql_fetch_assoc($login))
 {
    $db_password = $row['Password'];
    if ($password==$db_password)
      $loginyes = TRUE;
    else
      $loginyes = FALSE;

    if ($loginyes==TRUE)
    {
         setcookie("username",$username, time ()+3600);
    header("Location: login.php");
    exit();


    }
    else
      die("Incorrect Username or Password.");

 }

}
else
   die("Please enter a Username and Password.");
}
if(isset($_COOKIE["username"]){
 echo "Logged in as ".$_COOKIE["usename"];
}
?>

<form action="login.php" method="POST">
Username:<br />
<input type="text" name="username"><br />
Password:<br />
<input type="password" name="password"><br />
<input type="submit" name="login" value="Log in">

</form>