$username=htmlspecialchars($_POST["name"]);
$password=md5(htmlspecialchars($_POST["ps"]));
$exec="select * from guanli where zh='".$username."' ";

if($result=mysql_query($exec))
{ 
if($rs=mysql_fetch_array($result))
  {
    if($rs["zh"]==$username AND $rs["mm"]==$password);
    {
 
        $_SESSION['name']=$username;
 $_SESSION['mm']=$password;
     
     echo "<h>你已成功登陆青年网新闻管理系统</h>";
     echo "<script>location.href='all.php';</script>";
    }
else{
     echo "<script>alert('帐号或密码错误!');location.href='index.php';</script>";
    }
    }
else{
     echo "<script>alert('帐号或密码错误!');location.href='index.php';</script>";
    }
    }
else{
     echo "<script>alert('数据库连接出错!');location.href='index.php';</script>";
}
?>