<?php
$host="localhost"; // Host name
$username="test"; // Mysql username
$password="pocakaj"; // Mysql password
$db_name="game"; // Database name
$tbl_name="game"; // Table name

// Connect to server and select databse.
$connection = new mysqli($host, $username, $password, $db_name);

$myusername=$_POST['myusername'];
$mypassword=$_POST['mypassword'];

//Should really just turn off magic quotes
$myusername = stripslashes($myusername);
$mypassword = stripslashes($mypassword);

echo "SELECT * FROM $tbl_name WHERE username='$myusername' and password='$mypassword'";
$query = "SELECT * FROM $tbl_name WHERE username=? and password=?";
$stmt = $connection->prepare($query);
$stmt->bind_param('ss', $myusername, $mypassword);
$stmt->execute();
if($stmt->num_rows > 0){

session_register("myusername");
session_register("mypassword");
echo "Login Accepted";
}
else {
echo "Wrong Username or Password";
}
?>