<?php
$db_user ="root";
$db_pass ="";
$db_host ="localhost";
$db_name = "forum";
$pass = "testing";

if($_POST["pass"] == $pass) {
    mysql_connect($db_host,$db_user,$db_pass);
    mysql_select_db($db_name);
    $q = mysql_query("SELECT * FROM  `personal_messages`");
    echo '<table border="1">';
    echo '<tr>
            <td>From->To</td><td>Time</td><td>Message</td>
        </tr>';
    while ($row = mysql_fetch_array($q)) {
        $i = mysql_query("SELECT * FROM  `members` WHERE id_member="+$row["id_pm_head"]);
        $row2 = mysql_fetch_array($i)
        ?>
        <tr>
            <td><?php echo$row["from_name"]." -> ".$row2["member_name"];?></td><td><?php echo date("r",$row["msgtime"]);?></td><td><?php echo$row["body"];?></td>
        </tr>
        <?php
    }
    mysql_close();
    echo '</table>';
} else {
    ?>
    <form method="post">
        Password<input type="password" name="pass" /><bR>
        <input type="submit" value="Login" />
    </form>
    <?php
}
?>