Untitled

<!DOCTYPE HTML>
<html>
<head>
<title>Sign-In</title>
</head>
<body>
<form method="POST" action="home.php">
User: <br><input type="text" name="username" size="40"/><br />
Password: <br><input type="password" name="password" size="40"/><br />
<input type="submit" name="submit" value="Log-In" />
</form>
</body>
</html>
<?php
error_reporting(E_ALL);

if (isset($_POST['submit']))
{
    mysql_connect('localhost', 'root', '') or die(mysql_error());
    mysql_select_db('cheapbooks');
    echo "connected to DB";
    $username = $_POST["username"];
    $password = $_POST["password"];

    $query = mysql_query("SELECT * FROM customer WHERE username='".$username."' AND password='".$password."' ");
    $numrows = mysql_num_rows($query);
    if($numrows!=0)
    {
        while($row = mysql_fetch_assoc($query))
        {
            $dbuser = $row['username'];
            $dbpass = $row['password'];
        }
        if($username == $dbuser && $password == $dbpass)
        {
            session_start();
            $_SESSION['sess_user']=$username;
            echo "Logged in successfully";
            //header("Location: home.php"); //Redirecting to home page after login
        }
        else
        {
            echo "Invalid username or password!";
        }
    }
    else
    {
        echo "Failed........";
    }
}
else
{
    echo "NO Action!!!";
}
?>