i am trying to create a user login page, here is my script, does it look like it contains any errors:
<?php
session_start();
session_register("username");
$username = username;
?>
<head>
<title>Login Page</title>
</head>
<?php
$db = mysql_connect("localhost","root");
mysql_select_db("Football",$db);
if ((isset($HTTP_POST_VARS['username']) == true) && (isset($HTTP_POST_VARS['password']) == true))
{
$username= $HTTP_POST_VARS['username'];
$password = $HTTP_POST_VARS['password'];
$query = mysql_query("SELECT FROM members WHERE username = '$username' AND password = '$password'");
if (MYSQL_NUM_ROWS($query) == "1")
{
$query1 ="SELECT FROM members WHERE username ='$username'";
$result = mysql_query($query1);
$footie = mysql_fetch_array($result);
$username =$footie["username"];
$first =$footie["first"];
echo "Welcome $first";
?>
<blockquote>
<input type=hidden name="username" value="<?php echo $username ?>">
<br>
<
<?php
} else {
echo "Sorry, Your Information is not located in our records, please try
re-entering your login details or register!";
}
}
?>
</body>