} else {
$username = htmlspecialchars($_POST['username']);
$password = htmlspecialchars($_POST['password']);
$submit = htmlspecialchars($_POST['login']);
if(isset($_POST['login'])){
    if(!empty($username) && !empty($password)){
        $select = mysql_query("SELECT * FROM `admin` WHERE username = '".$username."' && password = '".md5($password)."'");
        if(mysql_num_rows($select) != 0){
            echo "<script type=\"text/javascript\">location.href='admin.php';</script>";
            $_SESSION['admin'] = $username;
        } else {
            echo "<span align=\"center\" style=\"color: red; text-align: center;\">טעות בהקשת המשתמש, אנא נסה שנית</span><br />";
        }
    } else {
        echo "<span align=\"center\" style=\"color: red; text-align: center;\">שם המשתמש או הסיסמא ריקים</span>";
    }
}
?>
<br /><br />
<form action="<?php $_SERVER['PHP_SELF'] ?>" method="POST" >
<table style="border: 3px dashed black; " border="1">
    <tr>
        <td>שם משתמש:</td>
        <td><input type="text" name="username" /></td>
    </tr>
    <tr>
        <td>סיסמה</td>
        <td><input type="password" name="password" /></td>
    </tr>
    <tr>
        <td><input type="submit" name="login" /></td>
        <td><input type="reset" /></td>
    </tr>
</table>
</form>
<?php
}
?>
</div>
</body>
</html>