Untitled

<html>
<head>
<title>Express Sales Login</title>
<h2>Express Sales Login
</head>
<body>
<?php>

require("dbconnect.php");

$username = $_POST["username"];
$password = $_POST["password"];


if(!$username)
{
	connect();

	$query = "SELECT USERNAME, PASSWORD, ACCESS FROM CUSTOMERS WHERE USERNAME = $username AND PASSWORD = $password";
	$result = mysql_query($query);
//30
	$row = mysql_fetch_array($result)

	$tempuser = {$row['USERNAME']};
	$temppass = {$row['PASSWORD']};

	if($tempuser == $username && $temppass == $password)
	{
		$_SESSION['access'] = $row['ACCESS'];
		$_SESSION['username'] = $username;

		header('Location: index.php');
	}
	else
	{
		print '<form name="input" action="login.php" method="post">';
		print 'Username: <input type="text" name="username" />   <a href="register.php>Register</a>';
		print 'Password: <input type="text" name="password">   <a href="forgot.php">Forgot Password?</a>';
		print '<input type="submit" value="Log in" />';
		print ' </form>	<br/><br/>';
		print 'Incorrect username / password, please try again.  You can can the Forgot Password option if you cannot remember your login information.';
	}


}

else
{

	print '<form name="input" action="login.php" method="post">';
	print 'Username: <input type="text" name="username" />   <a href="register.php>Register</a>';
	print 'Password: <input type="text" name="password">   <a href="forgot.php">Forgot Password?</a>';
	print '<input type="submit" value="Log in" />';
	print ' </form>';
}