<?php

session_start();

$username = $_POST['username'];
$password = $_POST['password'];

if ($username&&$password)
{
	$connect = mysql_connect("localhost","erik","eriper56") or die("Error connection db");
	mysql_select_db("exann") or die("Error selecting db");

	$query = mysql_query("SELECT * FROM login WHERE username='$username'");

	$numrows = 	mysql_num_rows($query);

	if ($numrows!=0)
	{
		while ($row = mysql_fetch_assoc($query))
		{
			$dbusername = $row['username'];
			$dbpassword = $row['password'];
		}

		if ($username==$dbusername&&md5($password)==$dbpassword)
		{
			$_SESSION['username']=$username;
			echo "You'r in! <meta http-equiv='refresh' content='2; url=member.php'>";
		}
		else
			echo "Something gut wrong!<meta http-equiv='refresh' content='2; url=index.html'>";

	}
	else
		die("That user dosen't exist!<meta http-equiv='refresh' content='2; url=index.html'>");

}
else
	die("Please enter a username and a password!<meta http-equiv='refresh' content='2; url=index.html'>");

?>