Untitled

<?php
include_once('_head.php');

if(isset($_POST['submit'])){
/* Post entered data */
$username = $_POST['username'];
$password = md5($_POST['password']);

/* Check if data is in the database*/
$query=mysql_query("SELECT * FROM users where username='$username' AND  password='$password'");
$count=mysql_num_rows($query);
}

/* If username and password match with those in database, user is take to the members area */
if(isset($count) == 1) {
	$_SESSION['username'] = $_POST['username'];
	Header("location: members.php");

}
/* Otherwise , user is redirected to the login form */
else
{
?>
<html>
	<body>
		<form method="post" action="<?php echo $_SERVER['PHP_SELF'];?>">
			<table border="0">
				<tr>
					<td>Username: </td><td><input type="text" name="username" />
					</td>
				</tr>
				<tr>
					<td>Password: </td><td><input type="password" name="password" />
					</td>
				</tr>
				<tr>
					<td>
					</td>
					<td><input type="submit" name="submit" value="Login" />
					</td>
				</tr>
				<tr>
					<td><a href="signup.php">Signup</a>
					</td>
				</tr>
			</table>
		</form>
	</body>
</html>
<?php
}
?>