<?php

include("main.php");
//$myusername=$_POST['myusername'];
$mypassword=$_POST['mypassword'];
$user = $_POST['myusername'];

$user = stripslashes($user);
$mypassword = stripslashes($mypassword);
$user = mysql_real_escape_string($user);
$mypassword = mysql_real_escape_string($mypassword);
$password= hash ( 'whirlpool' , $mypassword );
$sql="SELECT * FROM users WHERE User='$user' and Password='$password'";
$result=mysql_query($sql);
$count=mysql_num_rows($result);
if($count==0){
$data = mysql_query("SELECT * FROM users")
or die(mysql_error());
$info = mysql_fetch_array( $data );
header('Refresh: 1; url=login.php');
echo "Wrong Username or Password.";
die();
 }else
$data = mysql_query("SELECT * FROM users")
or die(mysql_error());
$info = mysql_fetch_array( $data );
$info['User'] ==  $_SESSION['myusername'];

?>