{
$username = mysql_real_escape_string($_POST['username']);
$password = $_POST['password'];
$password = md5($password);

$query = "SELECT * FROM members WHERE username='$username' and password='$password'";
$resource = mysql_query($query);

$row = "SELECT FROM `members` WHERE username='$username'";
$admin = mysql_query($row);
$some = mysql_fetch_assoc($admin);


if(mysql_num_rows($resource) == '1')
{
    if($some['access'] = '3')
    {
        session_start();
        $_SESSION['moderator']&&['username'] = htmlentities($username)
    }else
        {
            session_start();
            $_SESSION['username'] = htmlentities($username);
            header('location: /index.php');
        }
}else
    {
        echo "Wrong username or password";
    }
}