<?php
session_start();
include('db_connect.php');

$username = $_POST['username'];
$password = $_POST['username'];

$sql = "SELECT * FROM `users` WHERE `username` = '".$username."' AND `password` = '".md5($password)."' LIMIT 1";

$query = mysql_query($sql);

if(mysql_num_rows() = 1){
    $row = mysql_fetch_assoc($query);
    $_SESSION['logged_in'] = true;
} else {
    echo "Forkert brugernavn eller password";
}

?>