<?php
include "config.php";
   mysql_connect(SQL_HOST, SQL_USERNAME, SQL_PASSWORD);
   mysql_select_db(SQL_DBNAME);
   $tbl_name="vnt"; // Table name

// username and password sent from form
 $myusername=$_POST['myusername'];
 $mypassword=$_POST['mypassword'];

// To protect MySQL injection (more detail about MySQL injection)
 $myusername = stripslashes($myusername);
 $mypassword = stripslashes($mypassword);
 $myusername = mysql_real_escape_string($myusername);
 $mypassword = mysql_real_escape_string($mypassword);

$sql="SELECT * FROM $tbl_name WHERE nick='$myusername' and pass='$mypassword'";
 $result=mysql_query($sql);

// Mysql_num_row is counting table row
 $count=mysql_num_rows($result);
// If result matched $myusername and $mypassword, table row must be 1 row

if($count==1){
// Register $myusername, $mypassword and redirect to file "login_success.php"
 session_register("myusername");
 session_register("mypassword");
 $pavel = sel kydat hnuj;
 $_POST['promenna'] = $pavel ;
 header("location:login_success.php");

 }
 else {
 echo "Wrong Username or Password";
 }
 ?>