<?php
$dbHost = "localhost";
$dbUser = "stephan_sandbox";
$dbPass = "Nx883XTxC24hGJJz";
$dbName = "stephan_sandbox";

//verbinding maken met db
mysql_connect($dbHost, $dbUser, $dbPass) or die ("kan geen verbinding met database maken");
mysql_select_db($dbName) or die ("kan database: $dbName niet vinden");

//gebruikersnaam en ww ophalen vanuit formulier
$username = $_POST['username'];
$password = $_POST['password'];

//mysql injectie tegengaan
$username = mysql_real_escape_string($username);
$password = mysql_real_escape_string($password);

$query = "SELECT * from user WHERE UserName = '$username' AND Password = '$password'";
$result = mysql_query($query);

//rijen tellen
$count = mysql_num_rows($result);
//als er match gevonden is met $username en $password
if($count==1) {
    $_SESSION["username"] = $username;
    $_SESSION["password"] = $password;
    header("location:login_success.php");
} else {
    echo "Foutieve gebruikersnaam/wachtwoord";
}
?>