Untitled

<html>
<head>
<title>Express Sales Login</title>
<h2>Express Sales Login</h2>
</head>
<body>
<?php>

require("dbconnect.php");


if(!empty($_POST['username']) && !empty($_POST['password']))
{
$username = $_POST['username'];
$password = $_POST['password'];

  connect();

  $query = "SELECT USERNAME, PASSWORD, ACCESS FROM CUSTOMERS WHERE USERNAME = $username AND PASSWORD = $password";
  $result = mysql_query($query);
//30
  $row = mysql_fetch_array($result);

  $tempuser = $row['USERNAME'];
  $temppass = $row['PASSWORD'];

  if($tempuser == $username && $temppass == $password)
  {
    $_SESSION['access'] = $row['ACCESS'];
    $_SESSION['username'] = $username;

    header('Location: index.php');
  }

}


  print '<form name="input" action="login.php" method="post">';
  print 'Username: <input type="text" name="username" />   <a href="register.php>Register</a><br/>';
  print 'Password: <input type="text" name="password">   <a href="forgot.php">Forgot Password?</a><br/>';
  print '<input type="submit" value="Log in" />';
  print ' </form>'