Untitled

<?php

$connect = mysql_connect("localhost","root","test12345")or die ("MySQL Password falsch!");

mysql_select_db(klick,$connect)or die ("Datenbank existiert nicht!");

session_start();

$username = mysql_real_escape_string($_POST['username']);

$password = mysql_real_escape_string(sha1($_POST['password']));

$query2 = mysql_query("SELECT * FROM users WHERE username = '".$username."' && password = '".$password."')")or die (mysql_error());

mysql_result($query2);

mysql_num_rows($query2);

if(isset($_POST['login'])){
if(isset($_POST['username']) && isset($_POST['password'])){
$query = mysql_query("SELECT * FROM users WHERE username = '".$username."'")or die (mysql_error());
echo"Nix angegeben!";
if(strlen($username) > 25 && strlen($password) < 10){
echo"Dein Username ist zu kurz!";
} else if(strlen($password) > 25 && strlen($username) < 10){
echo"Dein Password ist zu kurz!";
} else {
header('Location: home.php');
}
}
}
?>


<html>
<head>
<title>Einloggen</title>

<style type="text/css">
body {
font-size:18px;
background-color::
}
</style>

<center>
<form action="login2.php" method="post">
<div id="registieren">Username:<br /><input type="text" name="username"></div>
<div style="margin-top:20px;font-familiy:verdana;font-weight:small-caps;font-size:25px;">Password: <br /><input type="password" name="password"></div>
<div style="margin-top:20px;"><input type="submit" name="login" value="Einloggen"><br/></div>
</center>