mysql_connect($dbhost, $dbuser, $dbpass)or die(mysql_error());



$username = $_POST[‘username’];
$password = md5($_POST[‘password’]);



$query = "SELECT * FROM  users WHERE username = $username AND password = $password";

$result = mysql_query($query);

if (mysql_num_rows($result) != 1) {
$error = "Bad Login";
    include "login.html";

} else {
    $_SESSION['username'] = "$username";
    include “memberspage.php”;
}