Untitled

<html>

<body>

<?php
$host="localhost";
$dbuser="det skulle du gjerne vist det";
$dbpass="det skulle du gjerne vist det";
$db="my_db";
$table="users";


//koble til database
$con = mysql_connect($host, $dbuser, $dbpass);
if(!$con)
    {
    die('Could not connect: ' .mysql_error());
    }


//velg database
mysql_select_db("$db")or die("cannot select db! ");

//brukernavn og passord sendt fra loginsiden
$username=$_POST['bruker'];
$pasword=$_POST['passord'];


// protection sak
$myusername = stripslashes($dbuser);
$mypassword = stripslashes($dbpass);
$myusername = mysql_real_escape_string($myusername);
$mypassword = mysql_real_escape_string($mypassword);

$sql="SELECT * FROM $table WHERE fornavn='$username' and etternavn='$pasword'";

$result=mysql_query($sql);
$count=mysql_num_rows($result);


if($count==1){


// Register $myusername, $mypassword and redirect to file "login_success.php"
session_register("bruker");
session_register("passord");
header("location:hemmelig.php");
}
else {
echo "Wrong Username or Password";
}
?>

</body>

</html>