<?php
function privmsg ($username ='will be defined later', $password) {

$query = mysql_query("SELECT * FROM admins WHERE username = '$username' AND password = '$password' LIMIT 1") or die(mysql_error());
	$row = mysql_fetch_array($query);

	// kontrollerar om användarkontot finns
	if(mysql_num_rows($query) > 0) {

		$_SESSION['user_login'] = 1;
		$_SESSION['user_id'] = $row['id'];
		$_SESSION['user_username] = $username;
		$_SESSION['user_name'] = $row['name'];
		$_SESSION['member_email'] = $row['email'];

		header("Location: ./loggedin.php");
                return true;
		}

	}

		else {
	echo '<script>alert("Dina kontouppgifter är felaktiga")</script>';
	echo '<script>history.back(1);</script>';
	}
}
return false;
}
?>