// Form for Login

if (!empty($_POST["username"]) && !empty($_POST["password"])) {


        $password=md5($_POST["password"]);

        $user=$mysql->query("SELECT * FROM users WHERE username='" . $mysql->real_escape_string($_POST["username"]) . "' AND password='" . $mysql->real_escape_string($password) . "'");

        if (!empty($user)) {

            $user=$user->fetch_array(MYSQLI_ASSOC);

            setcookie('id', $user["uid"], time() + 60*60*24*30, "/");

            setcookie('password', md5($_POST["password"]), time() + 60*60*24*30, "/");

        }

    }

}