Untitled

<?php


if (isset($_POST['submit'])) {


        $connection = mysql_connect("localhost","sparkon","");
        mysql_select_db("my_sparkon");

        if (!$connection)
        {
        die("Cannot connect to the database" . mysql_error());
        }
        $username= $_POST['username'];
        $password= $_POST['password'];

        // CONTROLLO PASSOWORD
        if ($username == NULL)
        {
        return;
        }
        if ($password == NULL)
        {
        return;
        }
        //ESCAPE DEI CARATTERI
        $username = mysql_real_escape_string($username);
        $password = mysql_real_escape_string($password);
        //ENTRIAMO NEL DATABASE
        $query = "SELECT id FROM users WHERE username ='$username' AND password =                  md5('$password')";
        $result = mysql_query($query);
        //CONTROLLO SE LA QUERY E' ESATTA
        if (!$result)
        {
        die("Controlla la query al database");
        }
        $record = mysql_fech_array($result);
        // CONTROLLO, UNA VOLTA MODIFICATO IL VALORE IN ROW SE ESISTE
        if (!$record)
        {
        die("Username or Password sbagliati");
        }
        else
        {
        die("Benvenuto" . $username ."Hai effettuato il Login alle: " . date(Y-m-d));
        };

} else {
    return;
};

?>

<html>
<head>
<title>LOGIN</title>
</head>
<body>
<form action="login.php" method="post">
<table>
<tr><td>
Username : <input type="text" name="username" />
</tr></td>
<tr><td>
Password : <input type="password" name="password" />
</tr></td>
</table>
<input type="button" name="submit" value="submit" />
</form>
</body>
</html>