if ($_GET["op"] == "login")
 {
// selects all info from accounts

$sql="SELECT * FROM accounts WHERE username=".$_POST['username']." AND password=".$_POST['password'];
$result= mysql_query($sql);
$count = mysql_num_rows($result);
if ($count == 1)
{
    // sets $obj with session info
 $obj = @mysql_fetch_object($result);
    $_SESSION["id"] = $obj ->id;
    $_SESSION["valid_user"] = $_POST[username];
    $_SESSION["firstname"] = $obj ->firstname;
    // redirects user to main page
#Header("Location:main.php");

   echo $count;
 }
 // else if user is not auth then die
 else
 {
     die($_POST["username"]. $_POST["password"]. $count);

 }
 }