<?php

session_start();

include_once ("connect_to_mysql.php");

$username = $_POST['username'];
$password = $_POST['password'];

$sql = ("SELECT * FROM members WHERE username='%s' AND password='%s'", mysql_real_escape_string($username), mysql_real_escape_string($password));

$result = mysql_query($sql);
$count = mysql_num_rows($result);

if($count!=0){

echo "Good";

} else {

echo "Wrong Username or Password";
}

?>