if($_GET['do'] == 1)
    {
        if(!isset($_POST["user"]) or !isset($_POST["pw"]))
        {
            @header("Location: index.php?error=1");
            exit;
        }

        $password = md5($_POST[pw]);
        $consulta = mysql_query("SELECT * FROM users WHERE User='$_POST[user]' AND Clave='$password'");
        if($result = mysql_fetch_array($consulta))
        {
            session_register("user");
            session_register("permisos");
            $_SESSION[user] = $_POST[user];
            $_SESSION[permisos] = $result[Priv];
            @header("Location: index.php");
        }
        else
        {
            @header("Location: index.php?error=2");
        }
    }