They're allowed to upload through scripts, I think it's 500 KB max, but you can't host a download server.
Come back and ask us politely instead of begging please. For now:
<?php $username = $_POST['username'];
$password = $_POST['password'];
$logged = $_COOKIE['cookie'];
if($logged == 1){
echo "<p>You're already logged in.</p>";
}
else if($username != '' && $password != ''){
@mysql_connect('mysql','####_dbname','your_passwor d');
@mysql_select_db('####_dbname');
$query = "select count(*) from table where username = '$username' and password = '$password'";
$result = mysql_query($query);
$count = mysql_fetch_array($result);
if($count['COUNT(*)'] == 1){
echo "<p>You logged in.</p>";
setcookie("cookie",1,time()+1800);
}
}
else{
echo "<form action=\"$PHP_SELF\" method=\"post\"><input type=\"text\" name=\"username\" /><input type=\"password\" name=\"password\" /><input type=\"submit\" value=\"login\" /></form>";
}?>
That will either print out the login form, or if logged in set a cookie and display a text. If the cookie is set (which it'll only be set for 30 mins) it'll display that they already logged in. Season to taste.