invisio v2.0

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />
</head>

<body>
<?php
	session_start();
	$flag=0;
	$username = $_POST['username'];
	$userpass = $_POST['userpass'];
	
	include("example.php");
	
	$con = mysql_connect("p3nlmysql57plsk.secureserver.net:3306","hpdb","hpdb123!@#");
	if (!$con)
	  {
	  die('Could not connect: ' . mysql_error());
	  }
	
	mysql_select_db("hpdb", $con);
	
	$result = mysql_query("SELECT * FROM login");
	$eid = '';
	
	while($row = mysql_fetch_array($result))
	  {
	  	 $uid = $row['userid'];
	  	 $upswd = $row['userpassword'];
	  if($uid == $username && $userpass == $upswd)
	  {
	  	$eid = $uid;
		$_SESSION['empids'] = $eid;
	  	$flag = 1;
		break;
	  }
		else
			$flag = 0;
	  }

if($flag == 1)
		header("Location:home.php");
	  else
	  	header("Location:login.html");
?>

</body>
</html>