<?php
	ob_start();
	session_start();

	// MySQL settings
	$mysql = array(
		"hostname" => "127.0.0.1",
		"username" => "root",
		"password" => "",
		"database" => "php-cms"
	);

	// Connect to mysql server
	$link = mysql_connect($mysql['hostname'], $mysql['username'], $mysql['password']) or die(mysql_error());
	$foo  = mysql_select_db($mysql['database']) or die(mysql_error());

	// Username and Password form
	$username = mysql_real_escape_string($_POST['username']);
	$password = mysql_real_escape_string($_POST['password']);

	// Query
	$query = mysql_query("SELECT * FROM `members` WHERE `username`='".$username."' AND `password`='".$password."'") or die(mysql_error());

	if(mysql_num_rows($query) > 0)
	{
		$_SESSION["username"] = $username;
		$_SESSION["password"] = $password;

		header("Location: success.php");
		exit;
	}
	echo "Wrong username or password!";
?>