Untitled

<?php
session_start();
include ('include/config.php');
	if(isset($_POST['login'])) {

$username = substr($_POST['username'], 0, 15);
$password = substr($_POST['password'], 0, 20);
$blowfish = md5($password);


$sql = "SELECT * FROM members where username=:username AND password=:password ";
$stmt = $dbconnect->prepare($sql);
$stmt->execute(array(':username' => $username, ':password' => $blowfish));
if($stmt->rowCount() == 1)
{
$_SESSION['username'] = $username;
$_SESSION['LoggedIn'] = TRUE;
header("location:index.php");
}
else
{
echo "Incorrect username or password.";
}
}
?>

<html>
<head>
<title></title>
<link rel="stylesheet" type="text/css" href="style.css" />
</head>
<body>
<form method="POST" action="" >
<table border="0">

<tr><td>Username </td><td><input type="text" name="username" size="20" /></td></tr>

<tr><td>Password </td><td><input type="password" name="password" size="20" /></td></tr>

<tr><td></td><td><input type="submit" value="Login" name="login" /></td></tr>

</table>
</form>
</body>
</html>