<?php

    function login($username,$password){

        $password = md5(sha1($password));
        $query    = "SELECT * FROM users WHERE username = '{$username}' AND password = '{$password}'";
        $res      = mysql_query($query) or die ("SQL error:".mysql_error());
        $rows     = mysql_num_rows($res);
        $ris      = mysql_fetch_array($res);
        $level    = $ris['level'];

        if($rows != 1)
        {
            print "Wrong username or password\n";
        }

        else
        {
        	if($level != 'admin')
        	{
           		print "Login lates with success";
            	setcookie('biscotto',$password,time()+2000,'/');
			}
			else
			{
           		print "Login lates with success,hi admin";
            	setcookie('biscotto',$password,time()+2000,'/');
			}
        }
    }

?>