<?php

include('config.php');

$user = protect($_GET['username']);
$pass = protect($_GET['password']);

$res = mysql_query("SELECT `id` FROM `users` WHERE (`username` = '{$user}' AND `password` = '{$pass}')");

if (mysql_num_rows($res) == 1) {
    echo "You logged in!";
} else {
    echo "Sorry, but there are no records of that username and password combination.";
}

?>