Untitled

<!DOCTYPE HTML>
<html>
<head>
</head>
<body>


<?php
$host="localhost";
$username="vaolabsfi_stud";
$password="fVC97!g0";
$db_name="vaolabsfi_digitala1";
$tbl_name="accountInfo";


// Connect to server and select databse.
mysql_connect("$host", "$username", "$password") or die(mysql_error());
echo "Connected to MySQL<br />";
mysql_select_db("$db_name") or die(mysql_error());
echo "Connected to Database<br />";

// Check $username and $password


// Define $username and $password
$username=$_POST['username'];
$pass=($_POST['pass']);


// To protect MySQL injection
$username = stripslashes($username);
$password = stripslashes($password);
$username = mysql_real_escape_string($username);
$password = mysql_real_escape_string($password);

$sql="SELECT * FROM accountInfo WHERE username='$username' and pass='$pass'";
$result=mysql_query($sql);

// Mysql_num_row is counting table row
$count=mysql_num_rows($result);
// If result matched $username and $password, table row must be 1 row
if ($count==1) {
    echo "Success! $count";
    session_start();


$sql2="SELECT email WHERE username = "' . $username .'" AND pass="' . $pass .'"


} else {
    echo "Unsuccessful! $count";


}

?>

</body>
</html>