<?php
session_start();
$username = $_POST['username'];
$password = $_POST['password']; $myusername = stripslashes($username); $mypassword = stripslashes($password);
if ($myusername && $mypassword)
{
$connect = mysql_connect("IP","DBUSER","DBPASS") or die("The MySQL database could not be connected to."); //passwords etc have been removed.
mysql_select_db("haydz");
$query = mysql_query("SELECT * FROM `users` WHERE `username` = '$myusername'");
$nunrows = mysql_num_rows($query);
if (!$numrows=0)
{
	while ($row = mysql_fetch_assoc($query))
	{
		$dbusername = $row['username'];
		$dbpassword = $row['password'];
	}
	if ($myusername == $dbusername && md5($mypassword) == $dbpassword)
	{
		echo "You have succesfully logged into your account.<a href='member.php'>Click</a> here to continue";
		$_SESSION['username'] = $dbusername;
	}
	else
		echo "Your username or password is incorrect.";
}
else
	die("This account is not registered, if you would like to register this account enter our server with this username (Server IP: 76.10.223.139:7777)");
}
else
	die("Please enter your correct username and password");
?>