require_once ("common.php");
$result = mysql_query(sprintf (" SELECT * FROM users WHERE username='%s' AND password='%s'", $_POST["username"], $_POST["password"]));
if(mysql_num_rows ($result) == 1)
{
echo "You're logged in";
}
else
{
echo "Bad password";
}
?>