session_start(); include 'functions.php'; $userName = $_POST['user_id']; $password = $_POST['password']; $action = $_POST['action']; if ($action == "Logout") { $_SESSION['loggedIn'] = false; session_destroy(); } if ($userName != "" && $password != "") { $result = runQuery("SELECT password FROM ebreimer_users WHERE user_id = '$userName'"); $row = mysql_fetch_array($result); $actual_password = $row['password']; if ($password == $actual_password) { $_SESSION['loggedIn'] = true; } } ?>