<?php
session_start();
ob_start();
?>
<?php
mysql_connect("IP addr","username","password") or die(mysql_error());
 
 
 
mysql_select_db("login") or die(mysql_error());
 
//if login form is submitted
 
if(isset($_POST['submit'])) { //if form is submitted
 
//check whether all the fields are filled or not
 
if(!$_POST['username'] | !$_POST['pass']) {
die('You did not fill all the fields.');
}
 
//verifies against database
$_POST['username']=md5($_POST['username']);
if(!get_magic_quotes_gpc()) {
$_POST['username']=addslashes($_POST['username']);
}
 
 
 
$check=mysql_query("SELECT * FROM users WHERE username='".$_POST['username']."'") or die(mysql_error());
//gives error if user doesnot exist
//{
 
$check2=mysql_num_rows($check);
 
if($check2==0) {
die('User does not exist');
}
while($info=mysql_fetch_array($check))
{
 
 
$_POST['pass']=stripslashes($_POST['pass']);
 
 
$info['password']=stripslashes($info['password']);
$_POST['pass']=md5($_POST['pass']);
 
 
//gives error if password is wrong
 
if($_POST['pass'] !=$info['password']) {
die('incorrect password,please try again.');
}
else
//if login is ok then direct them to options page
{
$_SESSION['views'] = 1;	
header("Location:option1.php");	
ob_flush();
 
?>
<!META HTTP-EQUIV="Refresh" CONTENT="0; URL=option1.php">
<?php
}
}
}
else
{
//if they are not logged in
 
?>
 
<form action="<?PHP echo $_SERVER['PHP_SELF']?>" method="post">
<table border="0">
<tr><td>Username:</td><td>
<input type="text" name="username" maxlength="50">
</td></tr>
<tr><td>Password:</td><td>
<input type="password" name="pass" maxlength="50">
</td></tr>
<tr><td colspan="2" align="right">
<input type="submit" name="submit" value="Login">
</td></tr>
</table>
</form>
<?php
}
?>

<?php 
session_start();
ob_start();
if(isset($_SESSION['views']))
$_SESSION['views']=$_SESSION['views']+1;
else
{
//header("Location:message.php"); 
echo "session not set"."</br>";	
print_r($_SESSION);
}
?>