Untitled

<?php
if(isset($_POST["username"]))
{
    $user = $_POST["username"];
} else {
    $user = "";
}
if(isset($_POST["password"]))
{
    $password = $_POST["password"];
} else {
    $password = "";
}
$validated = false;
session_start();
if($user!=""&&$password!="")
{
    if($user=="jsmith"&&$password=="letmein")
        $validated = true;
    if($validated) {
        $_SESSION['login'] = "OK";
        $_SESSION['username'] = $user;
        $_SESSION['password'] = $password;
        header('Location: protected.php');
    }
    else
    { $_SESSION['login'] = "";
        echo "Invalid username or password.";

    }
}
else $_SESSION['login'] = "";
?>

<html>
<body>
<h1>Login Page</h1>
<p>Please enter your
    username and password:</p>
<form action="login.php"
      method="post">
    <table>
        <tr>
            <td
                align="right">Username: </td>
            <td><input
                    size=\"20\" type="text"
                    size="20" maxlength="15"
                    name="username"></td>
        </tr>
        >
        <tr>
            <td
                align="right">Password: </td>
            <td><input
                    size=\"20\" type="password"
                    size="20" maxlength="15"
                    name="password"></td>
        </tr>
        <tr>
            <td> </td>
            <td colspan="2"
                align="left"><input
                    type="submit"
                    value="Login"></td>
        </tr>
    </table>
</form>
</body>
</html>