Untitled

<?php
    require "mysqlconn.php";
?>
<?php
$username = mysql_real_escape_string($_POST['username']);
$password = mysql_real_escape_string($_POST['password']);

//Do the lookup
if(mysql_num_rows(mysql_query("SELECT * FROM users WHERE Username=\"".$username."\" AND Password=\"".$password."\"") == 1)) {
//Do session stuff
}
?>
<html>
    <body>
        <form action="auth.php" method="post">
            <input type="text" name="username"><br>
            <input type="passwrod" name="password"><br>
            <input type="submit" name="submit">

        </form>
    </body>
</html>