login

<?php session_start();
include ("config.php");

  $username = trim(mysql_escape_string($_POST['username']));
  $passwords = trim(mysql_escape_string($_POST['pwd']));
  $password = md5($passwords);

  $cek = "SELECT * FROM membertbl WHERE username='$username' AND password='$password'";
  $hasil = mysql_query($cek);
  $hasil_cek = mysql_num_rows($hasil);

  //jika data tidak ditemukan maka tamplan pesan user dan psw salah
  if ($hasil_cek==0)
  {
    header("location:fail_login.php");
  }
    else
    {
      $_SESSION['userlogin'] =$username;
      header("location:loginscs.php");
    }
?>