Untitled

<html>

   <head>
      <title>Bartlomiej Daniel</title>
   </head>

   <body>
	   <?php
	   if (isset($_POST['login'])){
		   require 'connect.php';
		   $username = $_POST['username'];
		   $password = $_POST['password'];
		   $result = mysql_query('SELECT * FROM account WHERE username="'.$username.'" and password="'.$password.'"');
		   if (mysql_num_rows($result)==1){
			   $_SESSION['username'] = $username;
			   session_start();
				echo 'Welcome '.$_SESSION['username'];
			   }
			   else
			echo "Accoun't invalid. ";
		}
		if (isset ($_GET['logout'])){
			session_unregister('username');
		}

		?>

            <form method = "post" action = "home.php?action=login">
                  <table border = "0" cellspacing = "2"
                     cellpadding = "2">
                     <tr>
                        <td>Username</td>
                        <td><input name = "username" type = "text"
                           id = "username"></td>
                        <td>Password</td>
                        <td><input name = "password" type = "text"
                           id = "password"></td>
                           <td>&nbsp;</td>
                           <td><input type="submit" name="login" value="Login"</td>
                     </tr>
                  </table>
             </form>


               <form method = "post" action = "home.php">
                  <table width = "400" border = "0" cellspacing = "1"
                     cellpadding = "2">

                     <tr>
                        <td width = "100">Name</td>
                        <td><input name = "name" type = "text"
                           id = "name"></td>
                     </tr>

                     <tr>
                        <td width = "100">Surname</td>
                        <td><input name = "surname" type = "text"
                           id = "surname"></td>
                     </tr>

                     <tr>
                        <td width = "100">Age</td>
                        <td><input name = "age" type = "int"
                           id = "age"></td>
                     </tr>

                     <tr>
                        <td width = "100">Hometown</td>
                        <td><input name = "hometown" type = "text"
                           id = "hometown"></td>
                     </tr>

                     <tr>
                        <td width = "100">Favourite Color</td>
                        <td><input name = "color" type = "text"
                           id = "color"></td>
                     </tr>

                      <tr>
                        <td width = "100">Gender</td>
                        <td><input name = "gender" type = "text"
                           id = "gender"></td>
                     </tr>

                     <tr>
                        <td width = "100"> </td>
                        <td>
                           <input name = "add" type = "submit" id = "add"
                              value = "Dodaj">
                        </td>
                     </tr>

                  </table>
               </form>

<?php

         if(isset($_POST['add']))
			{
            $dbhost = 'localhost';
            $dbuser = 'pz78135';
            $dbpass = 'upiebah1Ie';
            $conn = mysql_connect($dbhost, $dbuser, $dbpass);

			if(! $conn)
			{
				die('Cant connect to database: ' . mysqli_error());
			}

            $name = mysql_real_escape_string($_POST['name']);
            $surname = mysql_real_escape_string($_POST['surname']);
            $age = mysql_real_escape_string($_POST['age']);
			$hometown = mysql_real_escape_string($_POST['hometown']);
			$color = mysql_real_escape_string($_POST['color']);
			$gender = mysql_real_escape_string($_POST['gender']);


            $sql = "INSERT INTO Dane (name, surname, age, hometown, color, gender)
			VALUES('$name', '$surname', '$age', '$hometown', '$color', '$gender')";

            mysql_select_db('pz78135');
            $a1 = mysql_query( $sql, $conn );

            if(! $a1 )
				{
					die('Cant send the data: ' . mysql_error());
				}
					echo "1 record was added\n";
            mysql_close($conn);
		} else {
?>

            <?php
         }
      ?>

   </body>
</html>