<?php
    session_start();


    $DServer = mysql_connect("localhost", "root") or die("Problem connecting to database" . mysql_error());
    $username = mysql_real_escape_string($_POST['username']);
    $password = mysql_real_escape_string(md5($_POST['password']));
    $Dbase = mysql_select_db("login", $DServer) or die(mysql_error());
    $SQL = "SELECT * FROM accounts WHERE userName = '$username' AND userPass = '$password'";
    $Result = mysql_query($SQL);

    if (mysql_num_rows($Result) > 0)

    //$keyUser = "admin";
    //$keyPassword = "password";

    //if(($username == $keyUser) && ($password == $keyPassword))
    {
        $_SESSION['loggedin'] = true;
        header("location: secretpage.php");
    }
    else
    {
        echo "Login Failed";
    }
?>