$uname = check_input($_POST[‘uname‘]);  
$passwd = $_POST[‘passwd‘];

@$sql = "SELECT username, password FROM users WHERE username= $uname LIMIT 0,1";

$result = mysql_query($sql);
$row = mysql_fetch_array($result);

if($row)
{
    $row1 = $row[‘username‘];   
    $update="UPDATE users SET password = ‘$passwd‘ WHERE username=‘$row1‘";
    mysql_query($update);
    
    if (mysql_error())
        print_r(mysql_error());

    echo ‘<img src="../images/flag1.jpg"/>‘;    
}
else  
    echo ‘<img src="../images/slap1.jpg"/>‘;