<form action="signup.php?submit" class='form colours' method='POST'>
	<fieldset>
		<legend>Join my community</legend>
			<p align='right'>Username: <input name='username' size='25' maxlength='25' /></p>			
			<p align='right'>Password: <input name='password' size='25' maxlength='25' /></p>	
                        <p align='right'><input type='submit' value='Submit' /></p>
	</fieldset>
</form>

<?php
// Check if the form has been submitted
if(isset($_GET["submit"]))
{
	if(isset($_POST["username"]) && isset($_POST["password"]))
	{	
		//Username or password is not blank
		if($_POST["username"]!="" && $_POST["password"]!="")
		{ // Everything is ok add the user to the database
 
			// Connect to the database
			require_once("classes/DbConnector.php");   // Include the database class
			$db = new DbConnector();               // Create an instance of the database class
			$db->connect();                               // Connect to the database
			$query = "SELECT * FROM members WHERE username='".$_POST["username"]."'";
			$result = $db->query($query);
			$result = mysql_num_rows($result);
 
			if($result!="0")
				echo "Username already exists!";
			else 
			{ 
				// Create a query that inserts the data from the form to the database
				$query = "INSERT INTO members(username,password) VALUES('".$_POST["username"]."','".$_POST["password"]."')";
 
				$result = $db->query($query);
				echo "Signed up succesfully you can now <a href=\"login.php\">log in</a>";
			}
		}
		else 
		{
			echo "Error: No username or password supplied, try again.";
		}
 
	}
	else 
		echo "Error: please fill in the <a href=\"signup.php\">signup form</a>";
}
?>

<?php
// login.php
session_start();
if(isset($_GET["submit"]))
{
	login($_POST["username"],$_POST["password"]);
}
function login($username,$password)
{	
	require_once("classes/DbConnector.php");
	$db = new DbConnector();
	$db->connect();
	$query = "SELECT * FROM members WHERE username='$username' AND password='$password'";
	$result = $db->query($query);
	$result = mysql_num_rows($result);  // Does the row exists?
 
	if($result!="0"){ 
	// authenication correct lets login
	$_SESSION["password"] = $password;;
	$_SESSION["username"] = $username;
	header("Location: member.php?id=$username");
	}
	else 
	{
		echo "Wrong username or password. Please try again!";
	}
}
?>