<?php
$dbhost = "localhost";
$dbname = "enx";
$dbuser = "enx";
$dbpass = "";
mysql_connect ( $dbhost, $dbuser, $dbpass);
mysql_select_db($dbname) or die(mysql_error());
session_start();
$username = mysql_real_escape_string($_POST['username']);
$password = md5($_POST['password']);
$query = "SELECT id FROM users WHERE username='".$username."' AND password='".$password."'";
$result = mysql_query($query);
if (mysql_num_rows($result) != 1) {
$error = "Bad Login";
    include "login.html";
} else {
    $_SESSION['username'] = "$username";
    include "memberspage.php";
}
?>