=2 AND strlen($_POST['userpassword'])>=2) { $uname = $_POST['username']; $upass = $_POST['userpassword']; $uname = stripslashes($uname); $upass = stripslashes($upass); $uname = mysql_real_escape_string($uname); $upass = mysql_real_escape_string($upass); $qulogch = mysql_query("SELECT * FROM permation WHERE uname = '$uname' AND upass = '$upass' AND ustat = 1")or die(mysql_error()); if(mysql_num_rows($qulogch) == 1) { $_SESSION['usnaaraba'] = $uname; $_SESSION['passaraba'] = $upass; header("Location: home"); } elseif(mysql_num_rows($qulogch) == 0) header("Location: deslogout"); }else header("Location: deslogout"); } ?> elshifa