$user = stripslashes($_POST['user']); $pass = stripslashes($_POST['user']); $pass = md5($pass);$_SESSION['username'] = $user; $_SESSION['password'] = $pass;