<?php
include("php-cont.php");
session_start();


$username = $_POST['username'];
$password = $_POST['password'];

if($username && $password)
{
    $connect = mysql_connect("$LocalHost", "$Username", "$Password") or die("Couldn't connect!");
    mysql_select_db("$DataBase") or die("Couldn't find db");

    $query = mysql_query("SELECT * FROM users WHERE username='$username'");

    $numrows = mysql_num_rows($query);

    if($numrows != 0)
    {

        while($row = mysql_fetch_assoc($query))
        {
            $dbusername = $row['username'];
            $dbpassword = $row['password'];
            $activation = $row['activation'];

            if($activation == '0')
            {
                die("Your account has not been activated. Please check your email to Activate!");
                exit();
            }


        }
        // check to see if they match!
        if($username == $dbusername && md5($password) == $dbpassword)
        {
            echo "You're in! <a href='member.php'>Click</a> here to enter the member page.";
            $_SESSION['username'] = $dbusername;
        }
        else
        {
            echo("Entered wrong password!");
            echo($username."/".$dbusername."/".md5($password)."/".$dbpassword);
            }

    }
    else
        die("That user doesn't exit");


}
else
    die("Please enter a username and password.");



?>