<?php

session_start();
$username = $_POST['username'];
$password = $_POST['password'];

if($username&&$password)
{


    $connect = mysql_connect("localhost","root","gongas97") or die ("Não é possivel connectar a base de dados!");
    mysql_select_db("login") or die ("Não foi encontrado a base de dados");

    $query = mysql_query("SELECT * FORM users WHERE username='$username");

    $numrows = mysql_num_rows($query);

    if($numrows !=0)
    {

    while ($row = mysql_fetch_assoc($query))
    {

        $dbusername = $row['username'];
        $dbpassword = $row['password'];

    }
        if ($username==$dbusername&&password==$dbpassword)
        {

            echo "Login successful - <a herf='membersarea.php'>Click here to enter the members area</a>";
            $_SESSION['username'] = $dbusername;

        }
        else
            echo "Error: Password Incorreta!";
    }
    else
        die ("Este usuario não existe!");

}
else
    die("Ensira um username e password!");

?>