1) You need to create a simple HTML login FORM. (ie: username, password and submit button)
2) When a user clicks submit, you need to test the FORM fields against the database using a SQL query.
3) If you have a invalid username/password, you need to inform the user and repeat step 1.
4) If you have a valid username/password, then save the users "user id" in a session variable and redirect to the checkout page.
5) In the checkout page, query the database for the user id that you stored in the session variable.
6) If you get a valid user record, then output user info.
7) If you get a invalid record then display an error.
The reason why you save the user id is, it makes it easier to lookup other user details from other tables. ie: What DVD's are overdue, or, a list of DVD's they have booked.