<?PHP
$username = ($_POST['username']);
$password = ($_POST['password']);
//check that form fields are set
//and redirect back to the login form if necessary
if (!isset($username) || !isset($password)) {
header( "Location: login.html" );
}
//check that the form fields are not empty, and redirect back to the login page if they are
elseif (empty($username) || empty($password)) {
header( "Location: login.html" );
}
else{

//set the database connection variables
$dbHost = "localhost";                          ////set your server
$dbUser = "dnl_login";                          //// server username
$dbPass = "login";                         //// server password
$dbDatabase = "dnl_login";                     //// which database to connect to

//connect to the database
$db = mysql_connect("$dbHost", "$dbUser", "$dbPass") or die ("Error connecting to database.");
mysql_select_db("$dbDatabase", $db) or die ("Couldn't select the database.");

$user = mysql_real_escape_string($username);       //// Sanitize user input
$pass = md5($password);                           ////MD5 Password (or you can use sha or whatever)
$result=mysql_query("select * from users where username='$user' AND password='$pass'", $db);

//check that at least one row was returned
$rowCheck = mysql_num_rows($result);
if($rowCheck > 0){
while($row = mysql_fetch_array($result)){
$sitename=$row["sitename"];
$user=$row["username"];
$password=$row["password"];
$id=$row["id"];
$fname=$row["fname"];
$lname=$row["lname"];
$email=$row["email"];
$address=$row["address"];
$city=$row["city"];
$state=$row["state"];
$zip=$row["zip"];
$bill_freq=$row["bill_freq"];
$paypal=$row["paypal"];
$bill_amount=$row["bill_amount"];
$bill_date=$row["bill_date"];
$created=$row["created"];
$package=$row["package"];
$storage=$row["storage"];
$bandwidth=$row["bandwidth"];
$referred_by=$row["referred_by"];
$status=$row["status"];
}
//start the session and register variables
  session_start();
$_SESSION['sitename'] = $sitename;
$_SESSION['username'] = $user;
$_SESSION['password'] = $password;
$_SESSION['id'] = $id;
$_SESSION['fname'] = $fname;
$_SESSION['lname'] = $lname;
$_SESSION['email'] = $email;
$_SESSION['address'] = $address;
$_SESSION['city'] = $city;
$_SESSION['state'] = $state;
$_SESSION['zip'] = $zip;
$_SESSION['created'] = $created;
$_SESSION['bill_amount'] = $bill_amount;
 $_SESSION['bill_freq'] = $bill_freq;
$_SESSION['paypal'] = $paypal;
$_SESSION['bill_date'] = $bill_date;
$_SESSION['storage'] = $storage;
$_SESSION['package'] = $package;
$_SESSION['bandwidth'] = $bandwidth;
$_SESSION['referred_by'] = $referred_by;
$_SESSION['status'] = $status;

  //we will redirect the user to secure page
  header( "Location: secure.php" );

}
else {
//if nothing is returned by the query, unsuccessful login code goes here...
echo 'Incorrect login name or password. Please <a href=./login.html>try again.</a>';
}
}
?>