Login/registration part of an Android application
Security

You are completely open to SQL injection (in your login as well as registration page). You should always use prepared statements.

Also, md5 is not good enough, use bcrypt.

Misc


class files should not have side effects as it makes it hard to reuse them. Just create a file called user.php and place the class - and nothing else - inside it.