<?php
/* Connect to DB - put in your include or leave here, whatever. */
session_start();
$db = mysql_connect( 'localhost', 'user', 'password' );
mysql_select_db( 'database' );

/* Connection check */
if ( !$db ) {
	die( 'MySQL Connection failed!'); //Ends script here.
}
$result = mysql_query( "SELECT User, Pass FROM admin WHERE User = '" . mysql_real_escape_string($_POST['name']) . "' AND Pass = '".md5($_POST['pass'])."' LIMIT 1" );
if ( $result && mysql_num_rows( $result ) == 1 ) {
	$user = mysql_fetch_assoc($r);
	$_SESSION['log']=1;
	$_SESSION['usr']=$_POST['name'];
	$_SESSION['ip']=$_SERVER['REMOTE_ADDR'];
	header('Location: index.php');
} else {
    echo '<p>Invalid username/password entered, please try again.</p>'
	echo '<p><a href="index.php" title="Back">Back</a></p>';
}
mysql_close( $db );
?>