Ubuntu-gr Forum

<?php

$name = $_POST['username'];
$pass = $_POST['password'];

mysql_connect("localhost", "root", "") or die(mysql_error()) ;
mysql_select_db("database") or die(mysql_error()) ;

$query = "SELECT * FROM `users` WHERE `col_1` = '$name'";
$result = mysql_query($query);
$row = mysql_fetch_assoc($result);

$db_password = $row['password'];

if ($db_password == $pass)
{
		header( 'Location: user_account.html' );
}
else
{
	echo "wrong";
}

?>