<?php
session_start();

$con = mysql_connect("hemligt","hemligt","hemligt") or die(mysql_error());
mysql_select_db("hemligt", $con);

function fInClean($in, $serialized = false, $allowTags = false){
if(!$serialized){
if (get_magic_quotes_gpc()) { $in = stripslashes($in); }
}
if(!$allowTags){ $in = strip_tags($in,"<b><u><i>"); }
return trim(mysql_real_escape_string($in));
}

$username = fInClean(@$_POST['username']);
$password = fInClean(@$_POST['password']);

if ($username&&$password)
{
$query = mysql_query ("SELECT * FROM users WHERE username='$username'");

$numrows = mysql_num_rows ($query);

if ($numrows!=0)
{
 while ($row = mysql_fetch_assoc($query))
	{
		$dbusername = $row ['username'];
		$dbpassword = $row ['password'];
	}

	//se om de passar
	if ($username==$dbusername&&md5($password)==$dbpassword)
	{
header('Location: member.php');
		$_SESSION['username']=$username;
		$_SESSION['minSession'] = 1;
	}
	else
		echo "Fel lösenord!";
}
else
	echo("Den där användaren finns inte!");
}
else
	echo ("Användarnamn och lösenord krävs, och rätta ska de vara!11");
?>