User Login

<?php

ob_start();
 $host="localhost";
 // Host name $username="";
 // Mysql username $password="";
 // Mysql password $db_name="test";
 // Database name $tbl_name="members";
 // Table name

// Connect to server and select databse.
 mysql_connect("$host", "$username", "$password")or die("cannot connect"); mysql_select_db("$db_name")or die("cannot select DB");

// Define $myusername and $mypassword
 $myusername=$_POST['myusername'];
 $mypassword=$_POST['mypassword'];

// To protect MySQL injection (more detail about MySQL injection)
 $myusername = stripslashes($myusername);
 $mypassword = stripslashes($mypassword);
 $myusername = mysql_real_escape_string($myusername);
 $mypassword = mysql_real_escape_string($mypassword); 
$sql="SELECT * FROM $tbl_name WHERE username='$myusername' and password='$mypassword'"; 
$result=mysql_query($sql);

// Mysql_num_row is counting table row 
$count=mysql_num_rows($result);

// If result matched $myusername and $mypassword, table row must be 1 row
 if($count==1){
 // Register $myusername, $mypassword and redirect to file "login_success.php"
 $_SESSION['myusername'];
 $_SESSION['mypassword']; 
header("location:../perfil.html"); 
} else {
 echo "Wrong Username or Password"; 
}
 ob_end_flush(); ?>

 if($count==1){
 // Register $myusername, $mypassword and redirect to file "login_success.php"

//Process the $result from the query and assign the session variable
$found_user = mysql_fetch_array($result);
 $_SESSION['myusername'] = $found_user['username'];
/*You probably don't want to store the password to the session  $_SESSION['mypassword'];   */
redirect_to($_SESSION['myusername']."_profilepage.html");
} 
else {
 echo "Wrong Username or Password"; 
}