if($_POST['submit']=='Enter') {
$err = array();
if (isset($_POST['login'])) { $login = $_POST['login'];
if ($login == '') { unset($login);} }
if (isset($_POST['password'])) { $password=$_POST['password'];
if ($password =='') { unset($password);} }
if (empty($login) or empty($password)) {
$err[]='You did not enter all the information you fill in all fields';
}
if (empty($err))
{
$login = stripslashes($login);
$login = htmlspecialchars($login);
$password = stripslashes($password);
$password = htmlspecialchars($password);
$login = trim($login);
$password = trim($password);
$password = md5($password);
// $password = strrev($password);
// $password = $password."b3p6f";
$result1 = mysql_query("SELECT * FROM users WHERE login='".$login."' AND password='".$password."'"); //извлекаем из базы все данные о пользователе с введенным логином
$myrow = mysql_fetch_array($result1);
if (empty($myrow['id'])) {

$err[]='Sorry, you entered your username or password is incorrect.';
} else {
$_SESSION['login']=$myrow['login'];
$_SESSION['password']=$myrow['password'];
$_SESSION['id']=$myrow['id'];
$_SESSION['rememberMe'] = $_POST['rememberMe'];
$_SESSION['dostup'] = $myrow['dostup'];
$_SESSION['business_unit'] = $myrow['business_unit'];
$_SESSION['linemanager'] = $myrow['linemanager'];
$_SESSION['phone_number'] = $myrow['phone_number'];
$_SESSION['lastname'] = $myrow['lastname'];
$_SESSION['firstname'] = $myrow['firstname'];
$_SESSION['post_id'] = $myrow['post_id'];

}
}