<?

$un = strip_tags($_POST['un']);
$pw = strip_tags($_POST['pw']);

    $connect = mysql_connect('localhost','root','') or die("Couldn't connect");
    mysql_select_db('login') or die("Couldn't find DB");

    $findun = mysql_query("SELECT * FROM users WHERE username='$un'");
    $findpw = mysql_query("SELECT * FROM users WHERE password='$pw'");
    $priv = mysql_query("SELECT * FROM users WHERE priv='$priv'");


    function chkpriv($priv)
    {
        if ($priv==admin)
        {
            echo 'admin';
        }
        else
        {
            if ($priv==master)
            {
                echo 'master';
            }
        }
    }

        if (mysql_num_rows($findun)==0)
            echo $un.' not found.';
        else
        {
            if (mysql_num_rows($findpw)==0)
                echo $pw.' is an invalid password';
            else
            {
                echo 'Welcome, '.$un.'! Your priv is '.$chkpriv.' :)';
            }
        }

?>