Untitled

<?php

$host="localhost";
$username="root";
$password="";
$db_name="Hackit";

mysql_connect("$host", "$username", "$password")or die("Connection Failed");
mysql_select_db("$db_name")or die("Connection Failed");

$username=$_POST['username'];
$password=$_POST['password'];

$username = stripslashes($username);
$password = stripslashes($password);
$username = mysql_real_escape_string($username);
$password = mysql_real_escape_string($password);

$sql="SELECT * FROM Users WHERE username='$username' and password='$password'";
$res=mysql_query($sql);

$count=mysql_num_rows($res);

if($count==1){

setcookie("loggedin", time()+36000);
header("location:index.php");
}
else{
echo "Wrong Username or Password";
}

?>
<html>
<body>

<center>
<form method="post">
<b>Login Panel</b>
<br />

Username:<input name="username" type="text">
<br />

Password:<input name="password" type="password">
<br />

<input type="submit" name="Submit" value="Login">

</form>
</center>
</body>
</html>