LOGIN1.php

<?php

include ("../../mysql_connect.php");
$pass = md5($_POST['password']);
$sql="SELECT id,username FROM book_user WHERE password='{$pass}' and username='{$_POST["username"]}'";

if($vysledek=mysql_query($sql)){

if(mysql_num_rows($vysledek)>0){

session_name("WebsiteID");

session_start();

$_SESSION['username']=$_POST['username'];

$_SESSION['id']=mysql_result($vysledek,0,'id');

header("location:index.php");

}else{

header ("location:login_error.php");

}

}else{

echo mysql_error();
}

?>