if ($_GET['login'] == "1") {

	/*
	   ************************************************
	   *	Login System
	   *
	   *	author:		PBU
	   *	version:	1.0
	   *
	   ************************************************
	*/

	$post_username = $_POST['username'];
	$sql = "SELECT * FROM m_users WHERE m_users_username = '$post_username'";
	$result = mysql_query($sql, $link);
	$obj = mysql_fetch_object($result);

	if ($obj->m_users_password == md5($_POST['password'])) {

		/* Sessionvariabeln füllen */

		$_SESSION['s_m_users_id'] = $obj->m_users_id;
		$_SESSION['s_m_users_username'] = $obj->m_users_username;
		$_SESSION['s_m_users_policy'] = $obj->m_users_policy;

		/* Weiterleitung zurück zum Index*/
		Redirect('index.php');

	}
	else {
		echo mysql_error();
		echo 'Benutzer und/oder Kennwort unbekannt/falsch!';

	}

}


echo'
	   <form action="?login=1" method="post">
		   <table class="table_class">
			   <tr>
				  <td colspan="2" rowspan="1">
					  <b><i>Login</i></b>
				  </td>
			   </tr>
			   <tr>
				  <td colspan="2" rowspan="1">
					<hr color="#000000" size="1" />
				  </td>
			   </tr>
			   <tr>
				  <td>
					  Benutzername
				  </td>
				  <td>
					  <input type="text" name="username" maxlength="30">
				  </td>
			   </tr>
			   <tr>
				  <td>
					  Passwort
				  </td>
				  <td>
					  <input type="password" name="password" maxlength="30">
				  </td>
			   </tr>
			   <tr>
				  <td colspan="2" rowspan="1">
					  <hr color="#000000" size="1" />
				  </td>
			   </tr>
			   <tr>
				  <td colspan="2" rowspan="1" align="center">
					  <input type="submit" value="Login" class="buttons">
				  </td>
			   </tr>
		   </table>
		  </form>
';