Untitled

<!doctype html>
<html>
<head>
<title>Login</title>
<style>
.warnings{
    width:100%;

    /* Firefox */
    display:-moz-box;
    -moz-box-pack:center;
    -moz-box-align:center;

    /* Safari and Chrome */
    display:-webkit-box;
    -webkit-box-pack:center;
    -webkit-box-align:center;

    /* W3C */
    display:box;
    box-pack:center;
    box-align:center;
}
.logo{
    width:100%;

    /* Firefox */
    display:-moz-box;
    -moz-box-pack:center;
    -moz-box-align:center;

    /* Safari and Chrome */
    display:-webkit-box;
    -webkit-box-pack:center;
    -webkit-box-align:center;

    /* W3C */
    display:box;
    box-pack:center;
    box-align:center;
}
.login_form{
    width:100%;

    /* Firefox */
    display:-moz-box;
    -moz-box-pack:center;
    -moz-box-align:center;

    /* Safari and Chrome */
    display:-webkit-box;
    -webkit-box-pack:center;
    -webkit-box-align:center;

    /* W3C */
    display:box;
    box-pack:center;
    box-align:center;

}
</style>
</head>
<body style="background-color:#f9c466;">

<div class="logo">
<img src="images/lucyslogo.png" alt="LucysLogo" style="width:140px;height:100px;">
</div>
<div class="login_form">
</br>
<form action="" method="POST">
Username: </br> <input type="text" name="user"></br>
Password: </br> <input type="password" name="pass"></br>
</br>
<input type="submit" value="Login" name="submit" />
<input type="button" class="button_active" value="Register" onclick="location.href='register.php';" />

</form>

<?php
if(isset($_POST["submit"])){

if(!empty($_POST['user']) && !empty($_POST['pass'])) {
    $user=$_POST['user'];
    $pass=$_POST['pass'];

    $con=mysql_connect('localhost','ncc','ncc') or die(mysql_error());
    mysql_select_db('ncc') or die("cannot select DB");

    $query=mysql_query("SELECT * FROM login WHERE username='".$user."' AND password='".$pass."'");
    $numrows=mysql_num_rows($query);
    if($numrows!=0)
    {
    while($row=mysql_fetch_assoc($query))
    {
    $dbusername=$row['username'];
    $dbpassword=$row['password'];
    }

    if($user == $dbusername && $pass == $dbpassword)
    {
    session_start();
    $_SESSION['sess_user']=$user;

    /* Redirect browser */
    header("Location: member.php");
    }
    } else {
    $login_invalid="Invalid username or password!";
    }

} else {
    $login_required="All fields are required!";
}
}
?>
</div>
</br>
</br>
<div class="warnings"><?php
echo "<b>".$login_invalid."<b>";
echo "<b>".$login_required."<b>";
?>
</div>

</body>
</html>