<?php session_start();?>
<?php
session_start();
include ('connect.php');
$username = $_POST['username'];
$password = $_POST['password'];
if ($username&&$password)
{
$query = mysql_query("SELECT * FROM users WHERE username = '$username'");
$numrows = mysql_num_rows($query);
if ($numrows!=0)
{
// code to login
while ($row = mysql_fetch_assoc($query))
{
    $dbusername = $row['username'];
    $dbpassword = $row['password'];
    $dblevel = $row['user_level'];
    $dbaccess = $row['access'];
}
if ($username==$dbusername&&$password==$dbpassword&&$dbaccess=1)
{
    include("header.php");
    echo "<div id='rightnav'>Your Logged In $username! <a href='admin.php'>Click here</a> to go to the Administrators page. <br>
    Or <a href='index.php'>Click Here</a> to go to the home page.</div>";
    include("footer.php");
    $_SESSION['username']=$dbusername;
    $_SESSION['user_level']=$dblevel;
    $_SESSION['access']=$dbaccess;
}
elseif ($username==$dbusername&&$password==$dbpassword&&$dbaccess=1)
{
    include("header.php");
    echo "<div id='rightnav'>Your Logged In $username! <a href='admin.php'>Click here</a> to go to the Administrators page. <br></div>";
    include("footer.php");
    $_SESSION['username']=$dbusername;
    $_SESSION['user_level']=$dblevel;
}

else
    include("header.php");
    echo "<div id='rightnav'>Incorrect Username or Password!.</div>";
    include("footer.php");
    }
else
     include("header.php");
     echo "<div id='rightnav'>That user doesn't Exist!</div>";
     include("footer.php");
}
else
    include("header.php");
    echo "<div id='rightnav'>Please Enter a Username and Password.</div>";
    include("footer.php");
?>