<?php
 
$con = mysql_connect("host", "user", "password") or die(mysql_error());
 
mysql_select_db("database");
 
$username = $_POST['username'];
$password = $_POST['password'];
 
$sql = "SELECT * FROM table WHERE username = '$username' and password = '$password'";
 
$result = mysql_query($sql);
 
$count = mysql_num_rows($result);
 
if($count == 1){
    session_register("username");
	session_register("password");
	header("location:loginsuccess.php");
}
else
{
	echo "Username or Password are incorrect.";
}
?>

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