<?php

$verbindung = mysql_connect("localhost", "root" ,"")
or die("keine verbindung m&ouml;glich.Falsches Passwort oder falscher Benutzername");

mysql_select_db("test3")
or die ("keine Datenbank mit diesem Namen gefunden");


$abfrage = mysql_query(" SELECT * FROM user WHERE userid = 1");

// $xy = mysql_query("SELECT * FROM `user` WHERE `password` = 'php123'");

echo mysql_num_rows($xy);
?>



<form method="POST" action="">

Username: <input type="text" name="username">
Passwort: <input type="text" name="password">
<input type="submit" name="submit" value="login">


</form>

<?php

$xy = mysql_query("SELECT * FROM user WHERE username =  '".$_POST['username']."' AND password = '".md5($_POST['password'])."'");


if (!empty($_POST['username']) && isset($_POST['username'])  )
if (!empty($_POST['password']) && isset($_POST['password'])  )

if (mysql_num_rows ($xy) == 1)
    {
        $user = mysql_fetch_object($xy);
        echo 'Willkommen'.$user->username;
    }

        else echo 'pw falsch';



echo "ÄÜ";






mysql_close($verbindung);


?>