<?php
function con() {
 mysql_connect("localhost", "root", "") or die(mysql_error());
 mysql_select_db("main")or die(mysql_error());
 $connected = $_SESSION['connected'] = true;
}

function getinfo() {
 $string = "SELECT * FROM info";
 $q = mysql_query($string) or die(mysql_error());
 while($query = mysql_fetch_array($q)) {
 echo "id: " . $query['id']  . $query['msg'] . "<BR>";
        }
    }

function checklogin() {
 if(isset($_SESSION['loggedin']) and isset($_POST['username'])) {
 $_SESSION['username'] = $username;
 echo "Logged in as user : $username";
 } else { include("news.php");
}

function login() {
 if(isset($_POST['username']) and isset($_POST['password'])) {
  $username = $_POST['username'];
  $username = stripslashes($username);
  $username = mysql_real_escape_string($username);
  $password = $_POST['password'];
  $password = stripslashes($password);
  $username = mysql_real_escape_string($username);
 }

 $sql_string = "SELECT * FROM login WHERE username = '$username' and password = '$password'";
 $sql_query  = mysql_query($sql_string) or die (mysql_error());

 if(mysql_num_rows>0){
   echo "Logged in successfully";
   $_SESSION['loggedin'] = true;
   $_SESSION['username'] = $username;
   }
 }
function secureuserpost() {
 $username = $_POST['username'];
 $username = stripslashes($username)
 $username = mysql_real_escape_string($username)
 $password = $_POST['password'];
 $password = stripslashes($password);
 $username = mysql_real_escape_string($username);
}
function addinfo($data) {
 con();
 $msg = mysql_real_escape_string(stripslashes($_POST['msg']));
 $msg = $_POST['msg'];
 $msg = stripslashes($msg);
 $msg = mysql_real_escape_string($msg);
 $insert_query_line = "INSERT INTO info (id, msg) VALUES (NULL, '$msg')";
 $data = mysql_query($insert_query_line) or die ("<center><pre>Error Adding Values mysql_error()</pre></center>");
}
function adduser($id,$username,$password) {
con();
writeform();
secureuserpost();
$q = "INSERT INTO login (id,username,password) VALUES ('NULL','$username','$password')";
$query = mysql_query($q) or die(mysql_error());
}
?>