Untitled

<?php

/**
 * @author Jason
 * @copyright 2010
 */

    session_start();

    if ( isset( $_SESSION['username'] ) && isset( $_SESSION['password'] ) )
    {

        echo "Welcome ".$_SESSION['username']."! Click here to logout.";

    }
    else
    {

        $username = $_POST['username'];
        $password = $_POST['password'];
        $submit = $_POST['submit'];

        if ( isset($submit))
        {

            if ( $username && $password )
            {

                include "connect.php";

                $query = mysql_query(" SELECT * FROM users WHERE username = '$username' ");

                $numrows = mysql_num_rows( $query );

                    if ($numrows!=0)
                    {

                        while ( $r = mysql_fetch_assoc( $query ) )
                        {

                            $dbusername = $r['username'];
                            $dbpassword = $r['password'];

                        }

                            if ( $username == $dbusername && $password == $dbpassword )
                            {

                                $_SESSION['username'] = $username;
                                $_SESSION['password'] = $password;

                            }
                            else
                            {
                                echo "Incorrect Password";
                            }

                    }
                    else
                    {
                        echo "Username is taken!";
                    }

            }
            else
            {
                echo "Please enter a username and password.";
            }


        }

    ?>

	<html>

		<form method='post' action="">

			Username: <input type="text" name="username"/><br />
			Password: <input type="password" name="password"/><br />

			<input type="submit" value="Log in" name="submit" />

		</form>

	</html>

    <?php

    }

    ?>