<?php
 
  if(count($_POST)>0 && $captcha == true) {
  	$username = mysqli_real_escape_string($con, $_POST["username"]);
  	$password = mysqli_real_escape_string($con, $_POST["password"]);
  	$username = htmlentities($username);
  	$password = htmlentities($password);
  	$save_passw = sha1($password);
 
   $stmt = $con->prepare("SELECT * FROM users WHERE username = ? AND password='$save_passw' AND active='1'");
   $stmt->bind_param("ss", $username, $password);
   $stmt->execute();
   $stmt->store_result();
 
   $stmt->bind_result($username, $password);
   $stmt->fetch();

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