<?php
    session_start();

    require('variables.php');
    mysql_connect($host,$user,$pass);
    mysql_select_db($db);

    if (isset($_POST['username']) && isset($_POST['password'])) {
        $username       =   mysql_real_escape_string($_POST['username']);
        $password       =   mysql_real_escape_string($_POST['password']);
        $query          =   "SELECT * FROM users WHERE username='".$username."' AND password='".$password."'";
        $result         =   mysql_query($query);
        $row            =   mysql_fetch_array($result);
    }





    if (isset($username) == $row['username'] && isset($password) == $row['password']) {
        $_SESSION['logged'] = 1;
    }
    if (!isset($_SESSION['logged'])) {
        echo '<form name="login" action="login.php" method="post">
        <input type="text" name="username" />
        <input type="password" name="password" />
        <button type="submit">Submit</button>
        </form>';
    }
    else {
        echo "You are logged in";
        session_destroy();
    }
?>