<?php

include 'functions.php';

if(isset($_POST['login']))

{
$username = $_POST ['username'];
$password = $_POST ['password'];

if (isset($username) && isset($password))
{
$dbUser = "";
$dbPass = "";

 mysql_connect("localhost", $dbUser, $dbPass, "tbluser");
 $login = mysql_query("SELECT * FROM tbluser WHERE 'FirstName'='$username'");
 while ($row = mysql_fetch_assoc($login))
 {
    $db_password = $row['password'];
	if ($password==$db_password)
	  $loginyes - TRUE;
	else
	  $loginyes = FALSE;

	if ($loginyes==TRUE)
    {
	     setcookie("username",$username, time ()+3600);
	header("Location: user.php");
    exit();


    }
    else
      die("Incorrect Username or Password.");

 }

}
else
   die("Please enter a Username and Password.");
}

?>

<form action="login.php" method="POST">
Username:<br />
<input type="text" name="username"><br />
Password:<br />
<input type="password" name="password"><br />
<input type="submit" name="login" value="Log in">

</form>