<?php
ob_start();
session_start();
require($_SERVER["DOCUMENT_ROOT"] . "/pages/config.php");
    if(isset($_POST['submit']))
    {
        $user = $_POST['user'];
        $pass = $_POST['pass'];
        $user = stripslashes(mysql_real_escape_string($user));
        $pass = md5(stripslashes(mysql_real_escape_string($pass)));
        $sql = "SELECT * FROM members WHERE user='$user' and pass='$pass'";
        $result = mysql_query($sql);
        if(mysql_num_rows($result) == 1)
        {
            $_SESSION['User'] = $user;
            $_SESSION['Pass'] = $pass;
            $_SESSION['LoggedIn'] = 1;
                while ($row = mysql_fetch_assoc($result)){
                    $_SESSION['ID'] = $row['ID'];
                }
            header("location:index.php");
        }
        else
            header("location:wrongup.php");
    }
    else
    {
        header("location:index.php");
    }
ob_end_flush();
?>