<form method="post" action="index.php" >
                                                       <label for="nama">Username : </label><input  type="text" name="username" /><br />
                                                       <label for="pswd">Password : </label><input class="login" type="password" name="password" />
                                                       <br /> <input  class="button" type="submit" value="Login" /> <p class="signup"><small>don't have id yet <a href="signup.php"> sign up</a> here</small></p>
							</form>
                                                       <?php if (isset($_POST['username'])) {
                                                                if (!empty($_POST['username']) && !empty($_POST['password'])) {
                                                                            $uname=mysql_real_escape_string($_POST['username']);
                                                                            $pswd= mysql_real_escape_string($_POST['password']);
                                                                         $query = "SELECT username,flag,fullname FROM user WHERE username = '".$uname."' AND password = '".$pswd."'";
                                                                        $do= mysql_query($query);

                                                                                        if (0!=mysql_num_rows($do))
                                                                                            {
                                                                                                    $_SESSION['user'] = mysql_fetch_assoc($do);
                                                                                                    header('Location: lihat.php');
                                                                                                     $sts =1;
                                                                                        }

                                                                                         else {
                                                                                             echo '<i>Username or Password Incorrect.</i>';
                                                                                                 }
                                                                                        }
                                                        else {
                                                                echo '<i>Username and Password must be filled.</i>';
                                                               }
                                                           } ?>