<?php

if(isset($_POST['loginForm'])){
    if($_POST['user'] == '') die("Please Enter a Username!");
    if($_POST['pass'] == '') die("Please Enter a Password!");

    $user = mysql_real_escape_string($_POST['user']);
    $pass = md5(mysql_real_escape_string($_POST['pass']));
    $email = mysql_real_escape_string($_POST['email']);

    $query = mysql_query("SELECT * FROM accounts WHERE Username='".$user."'");
    $num = mysql_num_rows($query);
    if($num < 1 ) die("That username Does not exist");
    $row = mysql_fetch_array($query);

    if($pass != $row['Password']) die("Password is incorrect.");

    $_SESSION['Username'] = $row['Username'];
    echo "Logged in successfully, ";
    echo $_SESSION['Username'];
    header("refresh: 2; url=index.php");
}else die("Error 701 - Please contact NHC Tech Staff to resolve this error");

?>