<?php
    $username = strip_tags(substr($_POST['username'],0,32));
    $pw = strip_tags(substr($_POST['pw'],0,32));

    $cleanpw = crypt(md5($pw),md5($username)); // crypt and md5 ^^

    $sql = "select username,password from users where user='" .  mysql_real_escape_string($username) . "' and password='" .  mysql_real_escape_string($cleanpw) . "' limit 1";
    $result = mysql_query($sql);

    if (mysql_num_rows($result))
    {
        //we have a match!
    } else {
        //no match
    }

// for nathanpc
// by v0id
?>