<?php
$username = $_POST['username'];
$password = md5(sha1(md5(md5(sha1($_POST['password'])))));
$userinfo = mysql_query("SELECT * FROM `users` WHERE `username` = '$username'") or die(mysql_error());
$userpass = mysql_query("SELECT * FROM `users` WHERE `password` = '$password'") or die(mysql_error());
$check = mysql_num_rows($userinfo);
$checkpass = mysql_num_rows($userpass);
if($check == '0');
{
	echo "Sorry. You have entered the wrong username";
}
if($checkpass =='0');
{
	echo "Sorry. You have entered the wrong password";
}
$_SESSION['user'] = "$username";
$_SESSION['password'] = "$password";
echo "You are being logged... Please wait...";
echo "Redirecting you...";

?>