<?php
SESSION_START();

include 'pConnection.php';

$username = addslashes($_POST['txtName']);
$password = addslashes(md5($_POST['txtPassword']));

$result = mysql_query("SELECT * FROM users WHERE email = '$username' AND password = '$password'") or die(mysql_error());

if (mysql_num_rows($result) == 0) {
    //user not found!
    header('Location: /index.php');
    exit();
}
else {
    // Valid user
    $_SESSION['username'] = $username;
    header('Location: /login.php');
}

mysql_close($con);

?>