<?php
session_start();

$host="localhost";
$db_username="heb";
$db_password="heb123";
$db_name="heb";

mysql_connect("$host", "$db_username", "$db_password")or die("cannot connect");
mysql_select_db("$db_name")or die("cannot open DB");

$username=$_POST["username"];
$password=$_POST["password"];

$username = stripslashes($username);
$password = stripslashes($password);
$username = mysql_real_escape_string($username);
$password = mysql_real_escape_string($password);

$query = "SELECT * FROM USER WHERE EMAIL_ADDRESS=\"$username\" and PASSWORD=\"$password\"";
$result = mysql_query($query);

$tempres = mysql_fetch_row($result);
$name=$tempres[3];

echo "fixme - Query is $query<br><br>";
echo "Welcome, $name $tempres[3]";

$userID = $tempres[0];
$_SESSION['userID']="$userID";
echo "<br>Your uid is ".$_SESSION['userID']."<br><hr><br>";

$query = "SELECT CUSTOMER_ID FROM USER_CUSTOMER WHERE USER_ID=\"$userID\"";
$result = mysql_query($query);
$tempres = mysql_fetch_row($result);
$custID = $tempres[0];
$_SESSION['custID']=$custID;

echo "You are customer ID ".$_SESSION['custID'].".<br>";

echo "<hr><br><a href=\"login1_success.php\">Continue</a>";

?>