$UserName=addslashes(trim($_POST['UserName']));
$UserEMail=addslashes(trim($_POST['UserEMail']));
$UserPass=md5(addslashes(trim($_POST['UserPass'])));
$sql="SELECT * FROM `users` WHERE (`UserName`='$UserName' OR `UserEMail`='$UserName') AND `UserPass`='$UserPass'";
$Rsql=mysql_query($sql) or die(mysql_error());
if (mysql_num_rows($Rsql)==1) {
$Dsql=mysql_fetch_assoc($Rsql);
$_SESSION['UserName'] =$Dsql['UserName'];
$_SESSION['UserID'] =$Dsql['ID'];
} else {
//Invalid username and/or password
}
Това е само за влизането. Ако ти трябват повече подробности - ЛС