Untitled

<?php
if ($_POST['username'] && $_POST['password']) {

session_start();
$dbhost = "localhost";
$dbuser = "root";
$dbpass = "";
$dbname = "windfyre";
mysql_connect("$dbhost", "$dbuser", "$dbpass");
mysql_select_db("$dbname");

$username = mysql_real_escape_string($_POST['username']);
$password = mysql_real_escape_string($_POST['password']);

$query = "SELECT * FROM operLogin WHERE username='$username' AND password='$password'";

$query = mysql_query($query);

$rows = mysql_num_rows($query);

       if ($rows != 0)
       {
       echo "You have been successfully been logged in ";
       echo $username;

	   session_register('uname');
       $_SESSION['uname'] = $username;

	   exit();
       } else {
  $errorMsg = "You have entered an incorrect username or password";
  }
}
?>
<html>
<head>
<title>Login</title>
</head>
<body>
<legend>Login</legend>
<?php echo $errorMsg ?>
<form action="./login.php" method="POST" />
<p><legend>Username: </legend><input type="text" name="username" /></p>
<p><legend>Password: </legend><input type="password" name="password" /></p>
<p><input type="submit" name="submit" value="Log in!"></p>
</body>
</html>