<?php

    $username = mysql_escape_string($_POST['username']);
    $password = mysql_escape_string(Enc($_POST['password']));

if ($_POST["submit"] == "Submit")
{
    if ($_POST['username'] && $_POST['password'] !== "")
    {
        if (preg_match('/[^0-9A-Za-z]/', $_POST['username']) == true)
            {
                echo "I'm sorry but somthing you entered wasnt allowed, Please try again!";
            }
            else
            {
                include 'config.php';

                $conn = mysql_connect($server, $dbuser, $dbpassword) or die ('Error Connectiong to Mysql: ' . mysql_error());
                mysql_select_db($database) or die ('Error Connectiong to Database' . mysql_error());

                $query = "SELECT * FROM users WHERE username ='" . $username . "' AND password ='" . $password . "'";
                mysql_query($query) or die('Could Not Execute Query: ' . mysql_error());

                if($row = mysql_fetch_array($result))
                {

                    if($row['username'] == $username)
                    {
                            if($row['password'] == $password)
                            {
                                echo 'Auth_Good';
                            }
                            else
                            {
                                echo 'Auth_Bad_password';
                            }
                    }
                    else
                    {
                        echo 'Auth_Bad_username';
                    }
                }
            }
    }
    else
    {
        echo 'Please Fill out the form Completly, Thank you.';
    }
}

//Thanks to EvilFairy for this nifty ecryption code :)
function Enc($EncodedString)
{
    $EncodedString = md5($EncodedString);
    $EncodedString = sha1($EncodedString);
    $EncodedString = md5($EncodedString);
    return $EncodedString;
}
?>