<?php

session_start();

$username = $_POST['username'];

$password = $_POST['password'];

if ($username&&$password)

{
$connect = mysql_connect("finance.com","citigold00","12345") or die("cannot connect!");
mysql_select_db("citigold_uloaku") or die("cannot find data base!");

$query = mysql_query ("SELECT * FROM keyaku WHERE username='$username'&&password='$password'");

$numrows = mysql_num_rows($query);

if ($numrows!=0)
{
while ($row = mysql_fetch_assoc($query))
{
    $dbusername = $row['username'];
    $dbpassword = $row['password'];
}
if ($username==$dbusername&&$password=$dbpassword)
{
    echo "Welcome man";
}
else
    echo "Wrong Password";
}
else
die("That user is fake");

}

else
 die("Please Enter a UserName and Password.");

?>