Untitled

<html>
<head>
<title>Express Sales Login</title>
<h2>Express Sales Login</h2>
</head>
<body>
<?php>

require("dbconnect.php");

$username = ( !empty($_POST['username']) ? $_POST['username'] : '');
$password = ( !empty($_POST['password']) ? $_POST['password'] : '');


if(!empty($username))
{
	connect();

	$query = "SELECT USERNAME, PASSWORD, ACCESS FROM CUSTOMERS WHERE USERNAME = $username AND PASSWORD = $password";
	$result = mysql_query($query);
//30
	$row = mysql_fetch_array($result);

	$tempuser = $row['USERNAME'];
	$temppass = $row['PASSWORD'];

	if($tempuser == $username && $temppass == $password)
	{
		$_SESSION['access'] = $row['ACCESS'];
		$_SESSION['username'] = $username;

		header('Location: index.php');
	}

}


	print '<form name="input" action="login.php" method="post">';
	print 'Username: <input type="text" name="username" />   <a href="register.php>Register</a><br/>';
	print 'Password: <input type="text" name="password">   <a href="forgot.php">Forgot Password?</a><br/>';
	print '<input type="submit" value="Log in" />';
	print ' </form>';