<?php

    $username = mysql_escape_string($_POST['username']);
    $password = mysql_escape_string(Enc($_POST['password']));

if ($_POST["submit"] == "Submit")
{
    if ($_POST['username'] && $_POST['password'] !== "")
    {
        if (preg_match('/[^0-9A-Za-z]/', $_POST['username']) == true)
            {
                echo "I'm sorry but somthing you entered wasnt allowed, Please try again!";
            }
            else
            {
                include 'config.php';

                $conn = mysql_connect($server, $dbuser, $dbpassword) or die ('Error Connectiong to Mysql: ' . mysql_error());
                mysql_select_db($database) or die ('Error Connectiong to Database' . mysql_error());

                $query = "SELECT * FROM users WHERE username ='" . $username . "' AND password ='" . $password . "'";
                mysql_query($query) or die('Could Not Execute Query: ' . mysql_error());

                $row = mysql_fetch_array($result, mysql_both);

                if($row['username'] == $username)
                {
                        if($row['password'] == $password)
                        {
                            echo 'Auth_Good';
                        }
                        else
                        {
                            echo 'Auth_Bad_password';
                        }
                }
                else
                {
                    echo 'Auth_Bad_username';
                }
            }
    }
    else
    {
        echo 'Please Fill out the form Completly, Thank you.';
    }
}

//Thanks to EvilFairy for this nifty ecryption code :)
function Enc($EncodedString)
{
    $EncodedString = md5($EncodedString);
    $EncodedString = sha1($EncodedString);
    $EncodedString = md5($EncodedString);
    return $EncodedString;
}
?>