<?php

$db='milkshakezombie';
$utb='tb_users';
$sv='127.0.0.1';
$username='both';
$password='both';

$connect=mysql_connect($sv, $username, $password);
$db_found=mysql_select_db ($db, $connect);

if (isset($_POST['login'])) {

$uname=mysql_real_escape_string($_POST['uname']);
$pword=md5(mysql_real_escape_string($_POST['pword']));

$result = mysql_query("SELECT * FROM $utb WHERE uname = '$uname'");
$num_rows = mysql_num_rows($result);

if ($num_rows = 0) {
			echo "Username not registered";
	}

else if ($num_rows = 1) {

$result2 = mysql_query("SELECT * FROM $utb WHERE uname = '$uname' AND pword = '$pword'");
$num_rows2 = mysql_num_rows($result2);

if ($num_rows2 = 0) {
			echo "Password incorrect";
	}

else {
	header ("location: loggedin.php");
	}
	}
	}

	?>