scode

<?php
/* By Lex */
define("IN_HOLOCMS", true);
include('config.php');
include('includes/mysql.php');
session_start();

if(!session_is_registered('username')){
	header("location: index.php");
	exit;
}
$q = mysql_query("SELECT * FROM users WHERE USERNAME = '".$_SESSION['username']."' LIMIT 1");
$myrow = mysql_fetch_assoc($q);


if(session_is_registered('scode') || $_SESSION['scode'] !== 'no' & $my_row['rank'] >= 4){
header("location: index.php");
exit;
} else {

if($myrow['scode'] == ''){
?>
<center>PERMESSI DISABILITATI, CONTATTA L'ADMIN PER ATTIVARLI!</center>

<?php } else {?>
<html>
<head>
  <title>Sicurezza</title>
</head>
<body style="  margin: 0px;
  background: url(https://habboo-a.akamaihd.net/c_images/reception/paris15_background_left.png) left bottom no-repeat,url(https://habboo-a.akamaihd.net/c_images/reception/paris15_background_right.png) right bottom no-repeat,url(http://i.imgur.com/RvR1eef.png) center bottom repeat-x;
  width: 100%;
  background-color: #024172;
  min-height: 400px;
  font-family: "Myriad-Pro";
  background-attachment: fixed;
  text-decoration: none;
  margin: 0;
  padding: 0;">
<center><div style="font-family:cursive;">INSERISCI IL TUO STAFF CODE <br><br></div>
<form action="" method="POST">
<input name="do" value="sc" type="hidden" readonly>
<input name="scode" type="password" autocomplete="off" style="  outline: none;
  border-radius: 5px;
  border: 2px solid #5593DA;
  padding: 7px;
  text-align: center;
  position:relative;
  margin: 0 auto;"><br><br>
<button type="submit" style="  width: 130px;
  height: 35px;
  background-color: #0065BA;
  position: relative;
  border-radius: 5px;
  cursor: pointer;
  color: #FFF;
  text-decoration: none;
  font-family: Calibri;
  font-size: 16px;
  display: inline-block;
  text-align: center;
    margin: 0 auto;
  font-weight: bold;
  border-color: #5593DA;
  text-transform: uppercase;
  box-shadow: 0 3px 0 1px rgba(0,0,0,.3);
  border-width: 2px;
  border-style: solid;
  outline: none;">ACCEDI</button></form></center>
</body>
</html>
<?php
$do = $_POST['do'];
if($do == 'sc'){
$scode1 = $_POST['scode'];

if($myrow['scode'] == $scode1){
$_SESSION['scode'] = $scode1;

header("location:me.php");
} else {
echo '<br> Codice Errato';
}

}


} }?>