<?php
session_start();

include('config.php');

$username = $_POST['username'];
$password = $_POST['password'];

$query=mysql_query("SELECT * FROM users where username='$username' AND  password='$password'");

$count=mysql_num_rows($query);
if($count==1) {
    $_SESSION["valid_user"] = $_POST["username"];

            Header("location: members.php");
    }
    else
    {
    echo "Username or password is incorrect";
    echo "<br />";
    echo "<a href='login.php'>Try again</a>";
    }

    ?>