<?
session_start();
include("sqlconnect.php");
$user2 = $_POST['user'];
$pass2 = $_POST['password'];

$user1 = strip_tags($user2);
$pass1 = strip_tags($pass2);
$user = stripslashes($user1);
$pass3 = stripslashes($pass1);
$pass = md5($pass3);


$query = "
SELECT * FROM `users`
WHERE `user` = '$user' AND `password` = '$pass'";


$result = mysql_query($query);

$rows = mysql_num_rows($result);



if ($rows <=0){
    echo "Incorrect login/password";
    exit;
}
else
{
    echo "Login successful...";


$query2 = mysql_query("SELECT `playername`,`clanid` FROM `users` WHERE `user` = '$user'");

$results2 = mysql_fetch_array($query2);


$_SESSION['user'] = $user;
$_SESSION['playername'] = $results2[0];
$_SESSION['loggedin'] = "yes";
$_SESSION['key'] = md5($playername);
$_SESSION['clanid'] = $results2[1];
echo "You have successfully logged in $results2[0]";
;

}
?>
<meta http-equiv="refresh" content="3;URL=index2.php" />