<?
if(isset($_POST['username'])){
$check = mysql_num_rows(mysql_query("SELECT * FROM tabel WHERE username='".mysql_real_escape_string($_POST['username'])."' AND password='".md5(mysql_real_escape_string($_POST['password']))."'"));
if($check == 1){
$_SESSION['user-name'] = $_POST['username'];
}
}
if(empty($_SESSION['user-name'])){
echo '<form method="post">
Gebruikersnaam<br/>
<input type="text" name="username"><br/>
Wachtwoord<br/>
<input type="password" name="ww"><br/>
<input type="submit" value="Inloggen"></form>';
die;
}
?>