W33 - loginform

<form method="post">
Username: <input type="text" name="username"><br>
Password: <input type="password" name="password">
<input type="submit" name="submited" value="přihlásit">
</form>
<?php
if(isset($_POST['submited']))
{
try{
$dbh = new PDO('mysql:host=mysql5-4;dbname=weed_110287', "weed.110287", "lol-neukážu!", array(PDO::ATTR_PERSISTENT => true));
$dbh->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
$query = $dbh->prepare("SELECT * FROM users WHERE login = :username");
$query->bindParam(':username', $_POST['username'], PDO::PARAM_STR);
$query->execute();
$result = $query->fetchAll();

if(!empty($result)){
  foreach($result as $row){
    if(sha1($_POST['password']) == $row['pwdhash'])
      {
        echo 'Login succesfull!';
      }
    else
      {
      echo 'Login failed.';       /*špatné heslo*/
      }
    }
}
else echo 'Login failed.'; /*uživatel neexistuje*/

}
catch(PDOException $e)
    {
    echo $e->getMessage();
    }
}

?>