<?php

/*
 * Coded by `P R O D I G Y™
 * @copyright 2011 - InterBB
 * This source is released as free, under the GNU-GPL License.
 */

require("header.php");

$username = clean($_POST['username']);
$password = hash('sha512', $_POST['password']);

if (isset($_POST['username']) && isset($_POST['password'])) {
$sql = mysql_query("SELECT * FROM users WHERE username = '" . $username . "' AND password = '" . $password . "' LIMIT 1") or die(mysql_error());
$rows = mysql_num_rows($sql);

if ($rows<=0 ) {
displayError("You have specified an invalid username or password.");
} else {
$_SESSION['username'] = $username;
echo "Yep";
}
}

?>

<form name="input" action="login.php" method="post">
Username: <input type="text" name="username" /><br />
Password: <input type="password" name="password" /><br />
<input type="submit" value="Login" />
</form>

<?php
require("footer.php");
?>