<?php

include 'functions.php';

error_reporting (E_ALL ^ E_NOTICE);

if ($_POST['login'])
{
    //get data
    $username = $_POST['username'];
    $password = $_POST['password'];
    $rememberme = $_POST['rememberme'];

    if ($username&&$password)
    {

        $login = mysql_query("SELECT * FROM users WHERE username='$username' AND password='$password'");
        while ($row = mysql_fetch_assoc($login))
        {
            $db_password = $row['password'];
            if (md5($password)==$db_password)
                $loginok = TRUE;
            else
                $loginok = FALSE;

            if ($loginok==TRUE)
            {

                if ($rememberme=="on")
                    setcookie("username", "$username", time()+7200);
                else if ($rememberme=="")
                    $_SESSION['username']=$username;

                header("Location: userarea.php");
                exit();
            }
            else
                die("Incorrect username/password combination.");
        }

    }
    else
        die("Please enter a valid username and password.");
}

?>

<form action="login.php" method="POST">
    Username:<br />
    <input type="text" name="username"> <p />
    Password:<br />
    <input type="password" name="password"><p />

    <input type="checkbox" name="rememberme"> Remember me<br />
    <input type="submit" name="login" value="Log In">
</form>