$numrows = mysql_num_rows($query);
    if ($numrows != 0)
    {

    while ($row=mysql_fetch_assoc($query))
        {
            $dbusername= $row['username'];
            $dbpassword = $row['password'];
        }
        // do they match?
        if ($username == $dbusername && $password == $dbpassword)
        {
        echo "Welcome. Click <a href='member.php' title='The Game :D'>here</a> for the premium section";
        $_SESSION['username'] = $dbusername;
        }
        else
        die ("Password Incorrect.");
    }
    else
        die ("User does not exist.");