include 'config.php';
$connect=mysql_connect($hostname, $username, $password); 
 
with 
 
$connect=mysql_connect(hostnamevalue, usernamevalue, passwordvalue); 
 
 

 
 
<?php
 
session_start();
$_SESSION['username']=$_POST['user'];
$_SESSION['password']=$_POST['pass'];
$_SESSION['authuser1']=0;
 
 
include 'config.php';
$connect=mysql_connect($hostname, $username, $password);
 
mysql_select_db("worldofp_blog1")
  or die(mysql_error());
 
 
 
  $get="SELECT user_name, pass_word 
       From user 
	   WHERE  user_name = '" . $_SESSION['username'] . "'
 	   ORDER BY user_name";
 
	   $results=mysql_query($get)
	     or die(mysql_error());
 
 
 
  $get1="SELECT user_name, pass_word 
       From user 
	   WHERE pass_word = '" . $_SESSION['password'] . "'
	   ORDER BY user_name";
 
	   $result=mysql_query($get1)
	     or die(mysql_error());
 
 
$row=mysql_fetch_array($results, $result);
 
 
$authuser= $row['user_name'];
$authpass= $row['pass_word'];
 
if($authuser and $authpass)
{
 
echo "hello";
$_SESSION['authuser1']==1;
}
else
{
echo "no";
$_SESSION['authuser1']==0;
}
 
 
 
 ?>
 
 
 
 
 
 

<?php
session_start();
 
include 'config.php'; //contains $hostname,$username,$password
 
$connect=mysql_connect($hostname, $username, $password); //connect 
mysql_select_db("worldofp_blog1") or die(mysql_error()); //select db
 
/* sanitize user's input  */
$user = mysql_real_escape_string($_POST['user']); 
$pass = mysql_real_escape_string($_POST['pass']);
 
 
$get="SELECT user_name, pass_word from user where user_name='$user' and pass_word='$pass'"; //check if username and password exists
$result=mysql_query($get) or die(mysql_error());
$is_valid = mysql_num_rows ($result);
 
if($is_valid) { // if a record exist set $_SESSION['authuser1'] = 1
	echo "hello";
	$_SESSION['authuser1']=1; 
} else { //else set $_SESSION['authuser1'] = 0
	echo "no";
	$_SESSION['authuser1']=0;
}
?>