gistfile1.txt

function check_username_and_pw($u, $pw) {
	$link = new mysqli(DB_SERVER, DB_USER, DB_PASSWORD, DB_NAME) or die('There was a problem connecting to the database.');
	
	$query = "SELECT * FROM users WHERE username = ? AND password = ? LIMIT 1";
	if($stmt = $link->prepare($query)) {
		$p = md5($pw);
		$stmt->bind_param('ss', $u, $p);
		$stmt->execute();
		$stmt->bind_result($id, $username, $pw);
		if($stmt->fetch()) {
			$_SESSION['authorized'] = true;
			$_SESSION['username'] = $username;
			return true;
		} else {
			return false;
		}
		$stmt->close();		
	}
	$link->close();
}