<?php
@session_start();
if (isset($_POST['username']) && isset($_POST['userpass'])){
    $username = $_POST['username'];
    $password = $_POST['userpass'];
    $query1 = mysql_query("SELECT * FROM users WHERE username = '$username' AND userpass = '$password'");
    if (mysql_num_rows($query1) != 0){
        $row1 = mysql_fetch_array($query1);
        $_SESSION['webhotmessengersession'] = "57UW". $username ."FI139";
        $_SESSION['userid'] = $row1['userid'];
    }else{
        if(empty($_SESSION['webhotmessengersession'])){
            header('Location: login.php');
        }
    }
}
?>