<?php

session_start();

if (isset($_SESSION['username']))
echo "You are logged in as $username";


$username = $_POST['username'];
$password = $_POST['password'];

if ($username&&$password)
{

$connect = mysql_connect("localhost","b3fantastico","password") or die("Could not connect to database");
mysql_select_db("example") or die ("Could not find Database");

$query = mysql_query("SELECT * FROM users WHERE username='$username'");

$numrows = mysql_num_rows($query);

if ($numrows!=0)
{
 while ($row = mysql_fetch_assoc ($query))
  {
        $dbusername = $row['username'];
        $dbpassword = $row['password'];
  }

 // Check to see if they match!
 if ($username==$dbusername&&md5 ($password==$dbpassword)
  {
     echo 'Successfully Logged in! <a href="member.php">Click here to enter the member page! </a>';
     $_SESSION['username']=$username;

 }
  else
      echo "Incorrect Password!";

 }
else
    die("That user does not exist!");

}

else
    die("Please enter a username and a password");

?>