<?
session_start();
   if(isset($_SESSION['user'])){
  header("location: index.php";
  exit;
  }
if(isset($_POST['login'])){
  global $err;
	include_once "connect.php";    
	
  	$cc=$db;
	$uname=mysql_reak_escape_string($_POST['uname']);
	$pwd=md5($_POST['pwd']);
	$sql=mysql_query("select * from user where uname='$uname' and pwd='$pwd'";
	if(!mysql_num_rows($sql)){
  		$err="<p class=\"error\"> Your username and password does not match our record.</p>";
	}else{
	$fet=$mysql_fetch_array($sql);
                $user_id=$fet['user_id'];
	$_SESSION['user_id']=$user_id;
	$_SESSION['secure']=md5($uname.time());
	$_SESSION['user']=$uname;
  	header("location: index.php";
  EXIT;
}

}
?>
<? echo $err; ?>
<form name="form1" method="post" action="">
<fieldset><legend><p><b>Login To Your Account </b></p></legend>
  <table width=""  border="0">
    <tr>
      <td><p>Username</p>      </td>
      <td><input name="uname" type="text" id="uname"></td>
    </tr>
    <tr>
      <td><p>Password</p>      </td>
      <td><input name="pwd" type="password" id="pwd"></td>
    </tr>
    <tr>
      <td>&nbsp;</td>
      <td><input name="login" type="submit" id="login" value=" Login ">
      <input type="reset" name="Submit2" value="Reset"></td>
    </tr>
    <tr>
      <td>&nbsp;</td>
      <td>
      <a href="lost.php">Forgot your password </a></td>
    </tr>
  </table>
  </fieldset>
</form>
<p>&nbsp;</p>

CREATE TABLE `user` (
  `user_id` int(11) NOT NULL auto_increment,
  `uname` varchar(20) NOT NULL,
  `pwd` varchar(100) NOT NULL,
  
  PRIMARY KEY  (`user_id`)
) ENGINE=MyISAM  COMMENT='users login'  ;

CREATE TABLE `user` (
  `user_id` int(11) NOT NULL auto_increment,
  `uname` varchar(20) NOT NULL,
  `pwd` varchar(100) NOT NULL,
  
  PRIMARY KEY  (`user_id`)
) ENGINE=MyISAM  COMMENT='users login'  ;