<?php
if(validUsername($_POST["username"])){
            $user = mysql_real_escape_string($_POST["username"]);

            $query_Salt = mysql_query("SELECT * FROM User WHERE Name='$user'", $dbRes);
            $salt = mysql_result($query_Salt, 0, "Salt");
            $pass = md5($salt.$_POST["password"]);

            $query_Login = mysql_query("SELECT * FROM User WHERE Name='$user' AND Password='$pass' AND Valid='1'", $dbRes);
            if(mysql_num_rows($query_Login) == 1){
?>