Lamer kau Lam

<?php
session_start();

//jika session username belum dibuat, atau session username kosong
if (!isset($_SESSION['username']) || empty($_SESSION['username'])) {
	//redirect ke halaman login
	header('location:login.php');
}
//cek data yang dikirim, apakah kosong atau tidak
if (empty($_SESSION['username']) && empty($_SESSION['password'])) {
	//kalau username dan password kosong
	header('location:login.php?error=1');

if(isset($_GET['message'])) {
		$sukses = '<div class="text-center">
<div class="alert bg-success alert-styled-left">
<button type="button" class="close" data-dismiss="alert"><span>&times;</span>
<span class="sr-only">Close</span></button>
<span class="text-semibold">Password berhasil diganti!</span>
</div></div>';
}

include('db/koneksi.php');

$data= mysql_query("SELECT * FROM users WHERE username = '".$_SESSION['username']."'");
$hasil= mysql_fetch_array($data);
$username = $hasil['username'];
$balance = number_format($hasil['balance'],0,',','.');
$pass = $hasil['password'];


if(isset($_POST['submit'])){
$pass = $_POST['password'];
$query = mysql_query("update users set password='$pass' where username='".$_SESSION['username']."'");
header('location:./pengaturan.php?message=success');
}
?>

<form action="" method="post" class="form-horizontal">

                                <div class="panel panel-default tabs">
                                    <ul class="nav nav-tabs" role="tablist">
                                        <li class="active"><a href="#tab-first" role="tab" data-toggle="tab">Personal Data</a></li>
                                       </ul>
                                    <div class="panel-body tab-content">
                                        <div class="tab-pane active" id="tab-first">
                                            <p>EDIT SENDIRI.</p>

                                            <div class="form-group">
                                                <label class="col-md-3 col-xs-12 control-label">Username</label>
                                                <div class="col-md-6 col-xs-12">
                                                    <input type="text" class="form-control" value="<?php echo"$username";?>" readonly/>
                                                </div>
                                            </div>

                                            <div class="form-group">
                                                <label class="col-md-3 col-xs-12 control-label">Password</label>
                                                <div class="col-md-6 col-xs-12">
                                                    <input type="text" class="form-control" value="<?php echo"$pass";?>" readonly/>
                                                </div>
                                            </div>

                                            <div class="form-group">
                                                <label class="col-md-3 col-xs-12 control-label">Ganti Password</label>
                                                <div class="col-md-6 col-xs-12">
                                                    <input type="text" class="form-control" name="password" placeholder="Password Baru"/>
                                                </div>
                                            </div>

                                    <div class="panel-footer">
                                        <center><button name="submit" class="btn btn-primary pull-right">Save Changes <span class="fa fa-floppy-o fa-right"></span></button></center>
                                    </div>
                                </div>

                            </form>