<?php

session_start();

if (!empty($_POST)) {


	mysql_connect('localhost', 'root', '') or die(mysql_error());
	mysql_select_db('teste');


	$username = mysql_real_escape_string($_POST['username']);
	$password = sha1($_POST['password']);

	$login = mysql_query("SELECT
                userid,
                username
                FROM
                users
                WHERE
                username = '$username' AND password = '$password'");

	if ($login && mysql_num_rows($login) == 1) {

		$_SESSION['id'] = mysql_result($login, 0, 0);
		$_SESSION['username'] = mysql_result($login, 0, 1);

		echo "<p>Ok, logado</p>";
	} else {

		echo "<p>Senha errada,<a href=\"login.php\">Tente novamente</a></p>";
	}
}
?>