Untitled

<?php

    // **************************** THIS IS MY HEADER PAGE *******************************


    require('connect.php');

?>

<!doctype html>

<html>
    <head>
        <title></title>
        <link rel="stylesheet" type="text/css" href="styles/main.css">
        <link rel="stylesheet" type="text/css" href="styles/navbar.css">
        <link rel="stylesheet" type="text/css" href="styles/fonts.css">
        <link rel="stylesheet" type="text/css" href="styles/forms.css">
    </head>
    <body>
        <div id="container">
            <div id="header">
                <?php
                    if(empty($_SESSION['username']))
                    {
                        include('loginbar2.php');
                    }
                    else
                    {
                        include('loggedinbar.php');
                    }
                ?>

                <span>Nizby</span>
            </div>

<?php

  // ************************************ THIS IS MY TOP BAR TO USE TO LOG IN *************


  $errors = 0;

  if(isset($_POST['login']))
  {
    $username = mysql_real_escape_string(stripslashes($_POST['username']));
    $password = mysql_real_escape_string(stripslashes($_POST['password']));
    $shapass = sha1($password);

    if($username != NULL && $password != NULL)
    {
        $query = 'SELECT users.username, users.password, users.id as `id`';
        $query .= ' FROM users';
        $query .= ' WHERE';
        $query .= " users.username = '" . $username . "'";
        $query .= " AND users.password = '" . $shapass . "'";
        //$query .= " AND users.id = '" . $userId . "'";

        $result = mysql_query($query, $dbCon)or die(mysql_error());

        $count = mysql_num_rows($result)or die(mysql_error());

        $row = mysql_fetch_assoc($result)or die(mysql_error());

        if($count == 1)
        {
            $_SESSION['username'] = $username;
            $_SESSION['userId'] = $row['id'];
            header('location:index.php');
            sleep(1);
        }
        else
        {
            $errors++;
            sleep(1);
        }
    }

  }


?>

<div id="topbar" class="botCorners staticshadow">
    <span>Welcome to Nizby!</span>
    <form method="post">
        <ul>
            <li><input type="text" name="username" value="<?php if($errors > 0) { if(!empty($username)) { echo $username; } } else { echo 'Username'; } ?>"/></li>

            <li><input type="password" name="password" value="<?php if($errors > 0) { if(!empty($password)) { echo $password; } } else { echo 'Password'; } ?>"/></li>

            <li><input type="submit" class="subb" name="login" value="Login" /></li>

            <li> | </li>

            <li><a href="register.php">Register!</a></li>
        </ul>
    </form>
</div>

<?php
 // ****************************   THIS IS MY TOP BAR AFTER LOGIN *************************


?>

<div id="topbar" class="botCorners staticshadow">
    <span>Welcome, <?php echo $_SESSION['username'];  ?>!</span>
        <ul id="menu">
            <li><a href="panel.php">Admin</a></li>

            <li> | </li>

            <li><a href="#">Options</a></li>

            <li> | </li>

            <li><a href="includes/logout.php">Logout</a></li>
        </ul>
</div>