<?php
session_start();

/**
 *                             CODETREE
 *                        support@mycodetree.com
 *                        http://mycodetree.com
 *
*/
if (isset($_POST['username']) && isset($_POST['password'])) {

foreach ($_POST as $key => $value) {

$_POST[$key] = trim(stripslashes($value));

}

$enc_password = md5($_POST['password']);

$username = $_POST['username'];

// Include MySQL database details
include_once '../includes/db.php';

mysql_select_db($db_name, mysql_connect($host, $dbusername, $dbpassword) or die(mysql_error()));

$sql = mysql_query("SELECT * FROM $tbl_name WHERE username='$username' and password='$enc_password'") or die(mysql_error());

$row = mysql_fetch_array($sql);

if (!$row) {

$err = "That password and user combination does not exist";
}

else {

$_SESSION['loggedin']['user'] = $_POST['username'];

}

}

?>

<table cellpadding='3' cellspacing='3' style='border: 1px solid #BBB;' width='100%'>

<?php

if (!is_null($err)) {

echo "<tr><td align='center'>$err</td></tr>";
}

?>

<tr>

<td>

<form action="scripts/checklogin.php" method="post">
<div>
<label for="username">Username:</label><br>
<input id="username" name="username" type="text"><br>
<label for="password">Password:</label><br>
<input id="password" name="password" type="password">
<input id="submit" type="submit" value="">
</div>
</form>

</td>

</tr>

</table>