<?php

$username = $_POST['username'];
$password = $_POST['password'];

if($username&&$password)
{
    $connect = mysql_connect("localhost","root","tbird60") or die("Couldn't Connect!");
    mysql_select_db("work") or die("Cant find Database.");
    $username = mysql_real_escape_string($username);
    $password = mysql_real_escape_string($password);
    $query = mysql_query("SELECT * FROM users WHERE username ='$username' AND password = '$password'");
    $numrows = mysql_num_rows($query);

    if($numrows!=0)
        echo "Welcome back ".$username." <a href='home.php'>Click</a> here to enter the home page.";
    else
            die("Incorrect username / password.");
}
else
    die("Please enter a username and password ");
?>