if (!empty($_POST['username']) != NULL && !empty($_POST['userpassword']) != NULL) {
// login check here
$username = $_POST['username'];
$userpassword = $_POST['userpassword'];
$username = $protect->protect1($username);
$userpassword = $protect->protect1($userpassword);
$kd45 = "jbstbb5rv34v43v44";
$query = mysql_fetch_array(mysql_query("select * from accounts where accname = '$username'")) or die('Query failed: ' . mysql_error());
$kd44 = $query['rndnum'];
$kd47 = str_split($kd45, $kd44);
$pass = "$username$kd47[0]$userpassword$kd47[1]";
$password = md5($pass);
$result = mysql_query("select * from accounts where accname = '$username' and password = '$password'") or die('Query failed: ' . mysql_error());