Untitled

<?php
session_start();
require('connection.php');
foreach($_GET as $key => $value){
$$key = $value;
}
if(isset($act) == true && $act == "process"){
foreach($_POST as $key => $value){
 $$key = $value;
}
$encryptedPass = md5($passLogin);
$checkUserQuery = "SELECT * FROM users WHERE username='$userLogin' AND password='$encryptedPass';";
$checkUserQueryResults = mysql_query($checkUserQuery) or die(mysql_error());
if($login = mysql_fetch_assoc($checkUserQueryResults)){
 $_SESSION['username'] = $userLogin;
 $confirm = "Thank you, you are now logged in as $userLogin. <br />You may now continue to the <a href=\"index.php\">index</a>";
}else{
 $errors = "Sorry username/password do not match anything in our database please try again.";
}
}
?>
<html>
<head>
<title>phpCity Login</title>
</head>
<body>
<?php
echo @$errors;
echo @$confirm;
?>
<form action='login.php?act=process' method='post'>
Username: <input type='text' name='userLogin' /><br />
Password: <input type='password' name='passLogin' /><br />
<input type='submit' value='Log In' />
</form>
</body>
</html>