<?
error_reporting(E_ALL);
include('config.php');
$tbl_name = "members";

//login
$myusername = mysql_real_escape_string($_POST['myusername']);
$mypassword = mysql_real_escape_string($_POST['mypassword']);


$sql = "SELECT * FROM $tbl_name WHERE username='$myusername' and password='$mypassword' LIMIT 1";
$result = mysql_query($sql);

$count = mysql_num_rows($result);

if($count==1) {
  session_start();
  $_SESSION['myusername'] = $myusername;
  $_SESSION['mypassword'] = $mypassword;
  $id = mysql_query("SELECT id FROM $tbl_name WHERE username='$myusername' and password='$mypassword'");
  $_SESSION['id'] = $id;
  header("Location: index.php");
  exit();
  }
  else {
  echo "Wrong Username or Password retry to login <a href='index.php'>here.</a>";
  }
  ?>