<?php
require_once("settings.php");
$usuario = null;
if (isset($_POST['username']) and isset($_POST['password'])) {
    $connection = mysql_connect($host, $user, $pass);
    mysql_select_db($db, $connection) or die($select_db_error);
    $username = $_POST['username'];
    $password = $_POST['password'];
    $query = "SELECT * FROM UsuariosWeb LEFT JOIN Propietarios ON propID=usrPropID WHERE usrEmail='{$username}' and AES_DECRYPT(usrPass,'typ2012')='{$password}'";
    $result = mysql_query($query, $connection) or die($query_error);
    if(mysql_num_rows($result)){
        $usuario = mysql_fetch_array($result);
    }
}
if($usuario==null){
    require_once("index.php");
    $wrong=true;
    exit();
}else{
    require_once("usuario.php");
    //header("Location: usuario.php?id={$usuario['propID']}");
}
?>