<?php

mysql_pconnect("localhost","mlstudio_scan","scan");
mysql_select_db("mlstudio_scan");

$userloginquery = mysql_query("SELECT * FROM tbl_staff WHERE Username='".strtolower($_POST['Username'])."' AND Password='".sha1($_POST['Password']."'") or die(mysql_error());
$numrows=mysql_numrows($userloginquery);

    if($numrows == 1) {
        while ($read = mysql_fetch_array($userloginquery)) {
            $privileges = sha1("mlscan". $read['Privileges']);
        }

        if(sha1("ml93" . $_POST['Password']) == $password) {
            $uservalid = TRUE;
            setcookie("privileges", $privileges, time()+21600, "/", "designbyml.com");
            setcookie("login", "".sha1("mlscan".strtolower($_POST['Username'])."", time()+21600, "/", "designbyml.com");
        }

        echo "Yes";
        exit;

    } else {

        echo "No";
        exit;

    }



?>