<?php include('db-connect.php');?>
    <form name="signin" id="signin" action="/sign-in.php" method="post">
                    <p><input type="text" name="user" id="user" placeholder="Username"></p>
                    <p><input type="password" name="pass" id="pass" placeholder="Password"></p>
                    <input type="submit" name="submit" value="Sign In">
                </form>

<?php include('db-connect.php');
session_start();

if($_SERVER["REQUEST_METHOD"] == "POST")
{
// username and password sent from Form
$user=addslashes($_POST['user']);
$pass=addslashes($_POST['pass']);
$pass = md5($pass);

$sql="SELECT * FROM users WHERE username='$user' and password='$pass'";
echo $sql;
$result=mysql_query($sql);
$count=mysql_num_rows($result);


    // If result matched $myusername and $mypassword, table row must be 1 row
    if($count==1) {
        session_register("myusername");
        $_SESSION['login_user']= $user;
        echo "logged in";
        //header("location: welcome.php");
    } else {
        echo "Your Login Name or Password is invalid";
    }
}

?>

<?php
$mysql_hostname = "localhost";
$mysql_user = "*username*";
$mysql_password = "*pass*";
$mysql_database = "*dbname*";

$bd = mysql_connect($mysql_hostname, $mysql_user, $mysql_password)
or die("Opps some thing went wrong");
mysql_select_db($mysql_database, $bd) or die("Opps some thing went wrong");

?>