Untitled

<?php
//LOGIN PAGE
$host = "localhost";        //HOST NAME
$username = "root";     //MYSQL USERNAME
$password = "";         //MYSQL PASSWORD
$db_name = "logintest"; //DATABASE NAME
$tbl_name = "Member";       //TABLE NAME

//Connect to server and select database
mysql_connect("$host", "$username", "$password") or die("Cannot Connect");
mysql_select_db("$db_name")or die("Cannot Select DB");

//username and password sent from form
$myusername = $_POST['myusername'];
$mypassword = md5($_POST['mypassword']);


//to protect MySQL injection
$myusername = stripslashes($myusername);
$mypassword = stripslashes($mypassword);
$myusername = mysql_real_escape_string($myusername);
$mypassword = mysql_real_escape_string($mypassword);

$sql="SELECT * FROM $tbl_name WHERE username = '$myusername' and password = '$mypassword'";
$result = mysql_query($sql);
//Mysql_num_row is counting table row
$count = mysql_num_rows($result);

//IF result matched $myusername and $mypassword, table row must be 1 row

if($count == 1){
//Register $myusername, $mypassword and redirect to file "login_sucess.php"
session_start();
$_SESSION['name'] = $myusername;
header("location:login_sucess.php");
}
else{
    echo "Wrong Username or Password";
    }
?>


<?php
//LOGIN PAGE
session_start();
if((!isset($_SESSION['name']))){
    header("location:main_login.php");
}
?>

<html>
<body>
    Login Successful
</body>
</html>