Notes

<?php
class auction{
private $existaccount=0;

function addAccount(){
$username=$_POST['username'];
$password=$_POST['password'];

if(trim($username)=="") return"<p>Error creating account: Blank Username</p>";
if(trim($password)=="") return"<p>Error creating account: Blank password</p>";
$password=md5 ($password);

$this->existaccount=0;
$this->existaccount=$this->checkAccount($username);
if($this->existaccount==1) return "<p>ERROR Username already exists</p>";
$sql="insert into tblaccount(username,password) values('$username','$password')";

$result=mysql_query($sql) or die("Error in adding account".mysql_error());

return "<p>Account for $username successfully created</p>";
}

private function checkAccount($username){
$sql="select username from tblaccount where username="$username"";
$result=mysql_query($sql) or die("Error in selecting account".mysql_error());
$accounts=mysql_num_rows($result);
if($accounts>0) return 1;
else return 0;
}

function checkLogin(){
$_SESSION['loginstatus']="";
$username=$_POST["username"];
$password=$_POST["password"];
$password=md5($password);

$sql="select * from tblaccount where username= '$username' and password='$password'";
$result=mysql_query($sql) or die ("Error in verifying login".mysql_error());

$num=mysql_num_rows($result);

if($num!=1){
$m=md5("invalid");
header("location: login.php?m=$m");
exit;
}
$_SESSION["loginstatus"]="true";
$row=mysql_fetch_array($result);
$_SESSION["accountid"]=$row["accountid"];
header("location: menu.php");
exit;
}
}
?>