<?php

mysql_connect("localhost", "DB_USER", "DV_PASS");
mysql_select_db("oscar193_login");

function addUser($username, $password, $email){
	$username = mysql_real_escape_string($username);
	$password = md5($password);
	$email = mysql_real_escape_string($email);
	$ip = $_SERVER['REMOTE_ADDR'];

	mysql_query("INSERT INTO `users` (`id`, `username`, `pass`, `email`, `ip`) VALUES (NULL, '$username', '$password', '$email', '$ip');");
}

function login($username, $password){
	$username = mysql_real_escape_string($username);
	$password = md5($password);

	$result = mysql_query("SELECT *  FROM `users` WHERE `username` = '$username' AND `pass` LIKE '$password'");

	$row = mysql_fetch_row($result);

	if($row[2] == $password){
		return true;
	}
	else{
		return false;
	}
}
?>