<?php
session_start();

include "processerror.php";
include "webstats.php";
set_error_handler("logmyerror");

$host = "localhost";
$user="root";
$pass="09k6CcsGxBq7p";
$db="aadatabase";

$connection = mysql_connect($host, $user, $pass) or die ("Unable to connect!");


mysql_select_db($db) or die ("Unable to select database!");


$_SESSION["user"] = $_POST["txtUsername"];

$query = "SELECT `PassWord` FROM `logins` WHERE `UserName` = '" . $_POST["txtUsername"] . "'";

$result = mysql_query($query) or die ("Error in query: $query. ".mysql_error());

//Login
if(mysql_num_rows($result) == 1)
{
    $pwd = mysql_fetch_row($result);
    if($pwd[0] !=$_POST["txtPassword"]){
        $_SESSION["user"] = $_POST["txtUsername"];
        // If Logged in check new passwords are same


            $query = "UPDATE `".$db."`.`logins` SET `PassWord` = '" .$_POST["txtPassword"]."' WHERE `UserName` = '" . $_POST["txtUsername"] . "'";
            //echo $query;
            if(mysql_query($query)){
                header("Location: /Forum/index.html");

            mysql_free_result($result);



    } else {
        // Cant Login
        trigger_error ("Incorrect Username", E_USER_NOTICE);
        echo "Incorrect username or password";
    }
}

else {
    header("Location: login.php");
}

mysql_close($connection);
?>