<?php
//===========================================================\\
// tBlogger                                                  \\
// Copyright (c) 2011 Ryan Davidson.  All rights reserved.   \\
//===========================================================\\

include ('../inc/config.php');

$username= mysql_real_escape_string(stripslashes ($_POST['username']));
$password= mysql_real_escape_string(stripslashes(MD5($_POST['password'])));

$result = mysql_query("SELECT * FROM users WHERE username = '" . $username . "' and password = '" . $password . "' LIMIT 1");

$count = mysql_num_rows($result);

if($count==1){
$_SESSION['loggedin'] = "1";
$_SESSION['username'] = $username;



header("Location: main.php");

}
else {
header ("Location: error.php");
}
exit;
?>