<?
//Get information from URL
$u = $_GET['username'];
$pass = $_GET['password'];
$u = mysql_real_escape_string($username);
$u = stripslashes($username);
//Database info
$host="localhost";
$username="username_here"; //Change this to your username for db
$password="password_here"; //Change this to your password for db
$db_name="db_name"; //Change this to your db name
//Connect
$duh = mysql_connect("$host", "$username", "$password")or die("Error 1");
//Select
mysql_select_db("$db_name")or die("Error2");

$find = mysql_query("SELECT * FROM users WHERE username='$u'");
while($row = mysql_fetch_array($find))
{
        $username=$row['username'];
        $passcheck = $row['password'];
        $ban = $row['ban'];

}
if(mysql_num_rows($find) < 1 || $pass != $passcheck)
{
        echo('<div style="text-align:center; color:red">Login Failed</div>');
}
if($pass == '')
{
        echo('<div style="text-align:center; color:red">You must enter a password.</div>');
}
if($username == '')
{
        echo('<div style="text-align:center; color:red">You must enter all details.</div>');
}
if($pass == $passcheck)
{
    if($ban == 0 || $ban == '0'){
        echo('<div style="text-align:center; color:green">Thank you for logging in!</div>');
    }
    if($ban == 1 || $ban == '1'){
        echo('<div style="text-align:center; color:red">Your account is banned.</div>');
    }
}
mysql_close($duh)
?>