if (($username) AND ($password)) {

            $query = "SELECT username, password FROM user ";
            $query .= "WHERE username='$username' AND password='$password'";
            $result = mysql_query($query, $connection);
             if (mysql_num_rows($result)) {

                $_SESSION['auth']= $username;
                echo "välkommen {$username}";
             }


            else{
            echo"skiten är invalid";


            }// stänger andra if
            }//stänger första if
            if ($session!=$username){
                echo "Logga in för att börja quizza";
                echo "<form action='$PHP_SELF' method='post' >";
                echo "User: <input type='text' name='username'>";
                echo "Pass: <input type='password' name='password'>";
                echo"<input type='submit' value='login'>";
                echo "</form>";
            }