<?php
include 'db_connect.php';

$myusername=$_POST['txbxemail'];
$mypassword=$_POST['txbxpass'];

$myusername = stripslashes($myusername);
$mypassword = stripslashes($mypassword);
$myusername = mysql_real_escape_string($myusername);
$mypassword = mysql_real_escape_string($mypassword);

$encrypted_mypassword=md5($mypassword);

$sql="SELECT * FROM tbl_user (I want to take name, contact number from table and put into varibale here.)
WHERE EmailAddress='$myusername' and Password='$encrypted_mypassword'";
$result=mysql_query($sql);
$count=mysql_num_rows($result);

if($count==1){
session_start();
$status = 'online';
$_SESSION['sesuser'] = "$myusername";
$_SESSION['sesstat'] = "$status";

header("location:../my-account.php");
}
else {
echo "Wrong Username or Password";
echo "<a href=\"javascript:history.go(-1)\"> Try again</a>";
}
?>