<?php
ob_start();
echo $_POST['username'];
session_start();
if($_POST['username']==""||!isset($_POST['username'])){
    header('Location: /');
}
if(isset($_SESSION['username'])){
    header( 'Location: ../memberspage.php' );
}


//Database Information
$dbhost = "localhost";
$dbname = "tbh_radio";
$dbuser = "tbh_radio";
$dbpass = "Radio123";


//Connect to database

mysql_connect ( $dbhost, $dbuser, $dbpass)or die("Could not connect: ".mysql_error());
mysql_select_db($dbname) or die(mysql_error());


$username = mysql_real_escape_string($_POST['username']);
$password = md5(mysql_real_escape_string($_POST['password']));
$query = "select * from users where username='$username' and password='$password'";

$result = mysql_query($query);

if (mysql_num_rows($result) < 1) {

$error = "Bad Login";
    include "../login.html";

} else {
    $_SESSION['username'] = $username;

    header( 'Location: ../memberspage.php' );
}

?>