if (isset($_GET['sid']) && trim($_GET['sid']) != '') {
	session_id($_GET['sid']);
}
session_start();
date_default_timezone_set('America/city');
$date = date('l jS F Y h:i A T');
$hostname = 'localhost';
$dbname   = 'mydb';
$username = 'mysql_un';
$password = 'mysql_pw';
mysql_connect($hostname, $username, $password) or DIE('Connection to host is failed, perhaps the service is down!');
mysql_select_db($dbname) or DIE('Database name is not available!');

if(isset($_POST['username'])){
	if(isset($_POST['password'])){

		$login = mysql_query("SELECT * FROM users WHERE (username = '" . mysql_real_escape_string($_POST['username']) . "') and (password = '" . mysql_real_escape_string(md5($_POST['password'])) . "')");
		$num_results = mysql_num_rows($login);


		if ($num_results == 1){
			$_SESSION['username'] = $_POST['username'];
			$_SESSION['password'] = $_POST['password'];
			while ($row = mysql_fetch_assoc($login)){
				$_SESSION['priv'] = $row['priv'];
				$_SESSION['email'] = $row['email'];
			}
			$tbl_name2="access_log";
			$user = $_POST['username'];
			$addrecord = mysql_query("INSERT INTO $tbl_name2 (id, username, date) VALUES ('','$user','$date')");
			if(isset($_SESSION['redir_after_auth'])){
				
				header('Location: http://employees.domain.com' . $_SESSION['redir_after_auth']);
				die();
			}
			else {
				header('Location: http://employees.domain.com?sid=' . session_id());
				unset($_SESSION['$num_results']);
				die();
			}
		}
		else {
			?>
			<table align="center">
			<tr><td align="center">
			<p style="color:#F00">
			<?php echo 'Incorrect Username or Password'; ?>
			</p>
			</td></tr>
			</table>
			<?php
		}
	}
}
?>


<div>
<form action="" method="POST">
<table align="center">
<tr><td align="left">Username: </td><td align="left"><input type="text" name="username"></td></tr>
<tr><td align="left">Password: </td><td align="left"><input type="password" name="password"></td></tr>
<tr><td align="left"><input type="submit" value="Login"></td></tr>
</table>
</form>
</div>

<?php
if (isset($_GET['sid']) && trim($_GET['sid']) != '') {
	session_id($_GET['sid']);
	}
session_start();
// Check, if user is already login, then load contents of page page
if (isset($_SESSION['username'])) 
{
?>
html page content here
<?php
}
else
{
	$_SESSION['redir_after_auth'] = $_SERVER['PHP_SELF'];
	header('Location: http://login.domain.com?page_id=258&sid='.session_id());
}
?>

$user = $_POST['username'];