Untitled

<?php
session_start();
?>

<html>
<head>
<link href="mall.css" rel="stylesheet" type="text/css">
</head>
<body>

<div class="logo">
<i>   1.0</i>

</div>
<div class="innehall">
</div>

<div class="meny">
<a href="index.php">Hem</a>
<?
if (isset($_SESSION['username']))
    {
     echo "<br />";
     echo "<a href='#'>Hem</a> <a href='#'>Lag</a> <a href='#'> Juniorlag</a> <a href='#'> Ekonomi</a> <a href='#'> Topplista</a> <a href='#'> Manager</a> <a href='#'> Arena</a> <a href='#'> Tävling</a> <a href='#'> Hjälp</a> <a href='#'> Matcher</a> <a href='#'> Cuper</a>";
    }
?>
</div>


<?php

if (!isset($_SESSION['username']) AND !isset($_POST['submit']))
{
echo "<div class='box1'>";
echo "Logga in";
echo "</div>";

echo '<div class="under-box1">';
echo "<form action='index.php' method='post'>";
echo "<input type='text' name='user' />";
echo "<input type='password' name='pass' />";
echo "<input type='submit' name='submit' value='Logga in!' />";
echo "</form>";
   echo "<a href='register.php'>Bli medlem</a>";


mysql_connect('localhost', 'root', '');
mysql_select_db('members_area');

$user = htmlspecialchars(addslashes($_POST['user']), ENT_QUOTES);
	$pass = htmlspecialchars(addslashes($_POST['pass']), ENT_QUOTES);

	$login_query = mysql_query("SELECT * FROM members WHERE user = '$user' && pass = '$pass'");
	$login = mysql_fetch_assoc($login_query);
        }
        $_SESSION['username'] = $_POST['user'];

	if($login AND isset($_SESSION['username']))

           {
            echo "<div class='innehall2'>";
            echo "<br /> <br /> <br /> <br />";
            echo "Välkommen, " . $_SESSION['username'] . "!";
            echo "</div>";
}


?>

</div>

</body>
</html>