<?php

$host="localhost";
$username="root";
$password="";
$db_name="greyhackit_99k_db";

mysql_connect($host, $username, $password)or die("Connection Failed");
mysql_select_db($db_name)or die("Connection Failed");

if(!isset($_COOKIE['loggedin'])){
	echo "<center>You are already logged in.</center>";
	}
else{
	if(isset($_POST['username'])&&($_POST['password'])){
		if(!empty($_POST['username'])&&!empty($_POST['password'])){
			$username=$_POST['username'];
			$password=$_POST['password'];

			$username = addslashes($username);
			$password = addslashes($password);

			$username = mysql_real_escape_string($username);
			$password = mysql_real_escape_string($password);

			$sql="SELECT * FROM users WHERE username='$username' and password='$password'";

			$res=mysql_query($sql);
			$count=mysql_num_rows($res);
			if($count==1){
				setcookie("loggedin", time()+36000);
				header("Location:index.php");
				}
			else{
				echo "Wrong username or password.";
				}
		}
	}
	echo '<center><b>Login Panel</b><br /><br /><form method="post">Username:<input name="username" type="text"><br />Password:<input name="password" type="password"><br /><input type="submit" name="Submit" value="Login"></form><br />No account? <a href="./register.php">Click Here!</a></center>'
}
?>