<?php include ('db.php');

$blank = NULL;
$username = $_POST['username'];
$password = $_POST['password'];


$user = mysql_real_escape_string($username);
$pass = mysql_real_escape_string($password);

$encryptpass=md5($pass);

$result = mysql_query("SELECT * FROM users WHERE username='$user' AND password='$encryptpass' limit 1");

if (mysql_num_rows($result)){
session_start("samwilki");
$_SESSION["samwilki"] = true;
header('Location: /home.php');
} else {
header('Location: /index.php?err=baddetails');
}
?>