<?php

session_start();

$username = $_POST ['username'];
$password = $_POST ['password'];

if ($username&&$password)
{
$connect = mysql_connect("****", "****", "****") or die("could not connect to mysql");
mysql_select_db("****") or die("could not connect to db");
}

$query = mysql_query("SELECT * FROM members WHERE username='$username'");

$numrows = mysql_num_rows($query);

if ($numrows!=0)
{
}
while  ($row = mysql_fetch_assoc($query))
{
$dbusername = $row['username'];
$dbpassword = $row['password'];
}

if ($username==$dbusername&&$password==$dbpassword)
{
echo ('you\'re in, click <a href="#">here</a> to enter your profile');
$_SESSION['username']=$username; 
}
else
{
echo ("please enter your username and password");
}

?>