<?
$user = htmlspecialchars(mysql_real_escape_string($_POST['user']));
$password = htmlspecialchars(mysql_real_escape_string($_POST['pass']));
$pass = md5(md5($password));
$sql="SELECT * FROM members WHERE user='$user' and pass='$pass'";
$result=mysql_query($sql) or die (mysql_error());
// Mysql_num_row is counting table row
$count=mysql_num_rows($result);
// If result matched $myusername and $mypassword, table row must be 1 row
if($count==1){
// Register $user, $pass and redirect to file "loginpro.php"
$_SESSION['user'] = $user;
$_SESSION['pass'] = $pass;
setcookie('user', ''.$user.'', time()+2*7*24*3600);
echo '<META HTTP-EQUIV="Refresh" CONTENT="5; URL=index.php">';
echo "<div class='accept'>Вие влязохте в акаунта си успешно! Ще бъдете пенасочен след <b><span id='pokaji'><script type='text/javascript' language='javascript'>pyrvoChislo();</script></span> секунди</b>.</div>";
}
else {
echo "<div class='error'> Грешен Потребител или Парола!</div>";
}
?>