Untitled

<?php
$username = "trinity";
$password = "trinity";
$auth = "auth";

mysql_connect("localhost",$username,$password) or die ("Нихуя не коннектиться");
mysql_select_db("$auth");

function checklogpass ($username, $password)
{
    $login = mysql_real_escape_string($username);
    $sha_pass_hash = sha1(strtoupper($login) . ":" . strtoupper($password));
    $query = "SELECT `id`
            FROM `users`
            WHERE `login`='{$username}' AND `password`='{$password}'
            LIMIT 1";
    $sql = mysql_query($query) or die(mysql_error());
    if (mysql_num_rows($sql) == 1) {
        $row = mysql_fetch_assoc($sql);
        return $row["id"];
    }
    else {
    return 0;
    }
};
if(isset($_SESSION['uid'])) {
header("Location: index.php");
}else{
if(isset($_POST['login']) || isset($_POST['passw'])){
if (checklogpass(mysql_real_escape_string($_POST['login']),mysql_real_escape_string($_POST['passw'])) != 0){
session_start();
$_SESSION['uid'] = checklogpass(mysql_real_escape_string($_POST['login']),mysql_real_escape_string($_POST['passw']));
$_SESSION['login'] = $_POST['login'];
header("Location: index.php");
} else {
$err = "Неверный логин или пароль";
}

} else {
}
}
?>
<html>
<head>
<title>Панель голосования</title>
<link rel="stylesheet" type="text/css" href="style.css" media="all" />
</head>
<body>
<center>
<div class="counter1">
<br />
Панель голосования<br />
<form action="" method="post" name="account">
Аккаунт:
<input type="text" name="login" size="20"><br>
Пароль:
<input type="password" name="pass" size="20"><br>
<INPUT TYPE="submit" VALUE="Войти">
</form>
</div>
</center>
</body>
</html>