<?php session_start();?>
<?php
$username = $_POST['username'];
$password = $_POST['password'];
if ($username&&$password)
{
include ('connect.php');
$query = mysql_query("SELECT * FROM users WHERE username = '%s'", mysql_real_escape_string($username));
$numrows = mysql_num_rows($query);
?>
<?php
if ($numrows!=0)
{
// code to login
while ($row = mysql_fetch_assoc($query))
{
	$dbusername = $row['username'];
	$dbpassword = $row['password'];
	$dbinitials = $row['initials'];
}
if ($username==$dbusername&&$password==$dbpassword)
{
	echo "Your Logged In! <a href='index.php'>Click here</a> to go to the user page.";
	$_SESSION['username']=$dbusername;
	$_SESSION['initials']=$dbinitials;
}
else
	echo "Incorrect Username or Password!.";
}
else
	 echo "That user doesn't Exist!";
}
else
	echo "Please Enter a Username and Password.";
?>