<?php
include "db.php";
if (isset($_POST['username']) && isset($_POST['password']))
{
    $username = mysql_real_escape_string($_POST['username']);
    $password = md5($_POST['password']);

    $query = mysql_query("SELECT * FROM `users1`
            WHERE username = '$username' AND password = '$password'");
    $query2 = mysql_query("SELECT groups FROM users1 "); 
    
       while($row1 =  mysql_fetch_array($query2)){
   
   }
       
    if ( mysql_num_rows($query) > 0 and $row1['groups'] = 'SB' ) { 
        session_start();
        $row = mysql_fetch_array($query);
        $_SESSION['username'] = $row['username'];
      echo $row['username'];
       
        header("Location: index2.php");
      
    }
    else if ( mysql_num_rows($query3) > 0 and $row1['groups'] = 'admin') {
       session_start();
        $row = mysql_fetch_array($query);
        $_SESSION['username'] = $row['username'];
      echo $row['username'];
       
        header("Location: index.php");
    
     } 
    else {
        header("Location: login.html");
    }
}

?>