<?php
// Database information

$dbhost=""; // Host name
$dbusername=""; // Mysql username
$dbpassword=""; // Mysql password
$db_name=""; // Database name
$tbl_name=""; // Table name

// Connect to server and select databse.
mysql_connect("$dbhost", "$dbusername", "$dbpassword")or die("cannot connect to DB");
mysql_select_db("$db_name")or die("cannot select DB");

// Fetching form-data from index.php
$user = $_POST['username'];
$pass = $_POST['password'];



$user = mysql_real_escape_string(stripslashes($user));
$pass = mysql_real_escape_string(stripslashes($pass));
$sql="SELECT * FROM $tbl_name WHERE `username`='$user' AND `password`='$pass'";
$query=mysql_query($sql) or die(mysql_error());


     $result = mysql_query($query);
    if(mysql_num_rows($result) == 1) {
      $_SESSION['user'] = $user;
      header("Location: userarea.php");
    }
    mysql_close($link);
?>