<?php
include 'db_connect.php';

$myusername=$_POST['txbxemail'];
$mypassword=$_POST['txbxpass'];

$myusername = stripslashes($myusername);
$mypassword = stripslashes($mypassword);
$myusername = mysql_real_escape_string($myusername);
$mypassword = mysql_real_escape_string($mypassword);

$encrypted_mypassword=md5($mypassword);

$sql="SELECT * FROM tbl_user WHERE EmailAddress='$myusername' and Password='$encrypted_mypassword'";
$status = 'online';
$cnumber = $result['ContactNumber'];
$fore = $result['Forename'];
$result=mysql_query($sql);

$count=mysql_num_rows($result);

if($count==1){
session_start();
$_SESSION['sesuser'] = "$myusername";
$_SESSION['sesstat'] = "$status";
$_SESSION['sesnumner'] = "$cnumber";
$_SESSION['sesforen'] = "$fore";

header("location:../my-account.php");
}
else {
echo "Wrong Username or Password";
echo "<a href=\"javascript:history.go(-1)\"> Try again</a>";
}
?>