<?php
$dbhost = "localhost";
$dbname = "pg20011_tires";
$dbuser = "pg20011_admin";
$dbpass = "tires@2010";

mysql_connect ( $dbhost, $dbuser, $dbpass)or die("Could not connect: ".mysql_error());
mysql_select_db($dbname) or die(mysql_error());

$username = $_POST['username'];
$password = $_POST['password'];

$query = "select * from users where username='$username' and password='$password'";

$result = mysql_query($query);

if (mysql_numrows($result) != 1) {
$error = "Bad Login";
    header("Location: website.php?page=login_fail");
} else {
    $_SESSION['username'] = $username;
    include 'loginsucess.php';
}
?>