include("connection.php");
		session_start();
		session_register("session");


		$query = "SELECT *
                  FROM users
                  WHERE username = '".mysql_escape_string($username)."'
                  AND password = '".mysql_escape_string($password)."'";
		$result = mysql_fetch_array(mysql_query($query));
		if(!$result) {
		session_unset();
		return 'no';
		}
		else
			{
		$session['id']=session_id();
		$session['username']=$username;
		return 'yes';
			}
		}

	public function Logout() {

	session_start();
	session_register("session");
	session_unset();
	session_destroy();
	return 'logout';
	}

else
                    {
            $session['id']=session_id();
            $session['username']=$username;
            return 'yes';
                    }
            }

if(doLogin($user,$pass) == 'yes')
{
    Header("Location: index.php");
    exit;
}