Untitled

<?php
session_start();
?>
<table width="300" border="0" align="center" cellpadding="0" cellspacing="1" bgcolor="#CCCCCC">
<tr>
<form name="form1" method="post" action="">
<td>
<table width="100%" border="0" cellpadding="3" cellspacing="1" bgcolor="#FFFFFF">
<tr>
<td colspan="3"><strong>Member Login </strong></td>
</tr>
<tr>
<td width="78">Username</td>
<td width="6">:</td>
<td width="294"><input name="username" type="text" id="username"></td>
</tr>
<tr>
<td>Password</td>
<td>:</td>
<td><input name="password" type="password" id="password"></td>
</tr>
<tr>
<td>&nbsp;</td>
<td>&nbsp;</td>
<td><input type="submit" name="Submit" value="Login"></td>
</tr>
</table>
</td>
</form>
</tr>
</table>
<html><center><a href="pages/register.php">New User? Click here!</a></center><html>
<?php
ob_start();
require('/home/phpboard/public_html/includes/config.php');
if(isset($_POST['submit']))
{
    $username = mysql_real_escape_string(stripeslashes($_POST['username']));
    $password = mysql_real_escape_string(stripeslashes($_POST['password']));
    $result = mysql_query("SELECT * FROM UserData WHERE username='$username' AND password='$password'") or die (mysql_error());
    $count=mysql_num_rows($result);

    if($count==1){
    $name = $_SESSION['username'];
    echo "Login Successful!";
}
    else
    {
    echo "Incorrect Username or Password!";
    }
ob_end_flush();
}
?>