<?php

session_start();

$username = $_POST['username'];
$username = $_POST['password'];

if ($username&&$password)

{

$connect = mysql_conncet("localhost","root","") or die ("Couldn't connect!");
mysql_select_db ("login") or die ("couldn't find db");

$query = mysql_query("SELECT * FROM users WHERE username='$username'");


$numrows = mysql_num_rows($query);

if ($numrows!=0)
{
    while ($row =mysql_fetch_assoc($query))
    {
        $dbusername = $row ['username'];
        $dbpassword = $row ['password'];
    }

    //check to see if they match!
    if ($username==$dbusername&&$password==$dbpassword)
    {
        echo "You're in!<a href='member.php'>Click</a> here to enter the memberpage";
        $_SESSION['username']=$username;


    }
    else
        echo "Incorrect password!";
}
else
    die ("That user doesen't exsist!");

}
else
    die("Please enter username and a password!");



?>