Untitled

<?php
 ob_start();
 session_start();
 require_once 'serverconfig.php';


 if ( isset($_SESSION['user3'])!="" ) {
  header("Location: home.php");
  exit;
 }

 if( isset($_POST['btn-login']) ) {

  $uname = $_POST['uname'];
  $upass = $_POST['pass'];

  $username = strip_tags(trim($uname));
  $userpass = strip_tags(trim($upass));

  $res=mysql_query("SELECT userid, username, password FROM user3 WHERE username='$username'");

  $row=mysql_fetch_array($res);

  $count = mysql_num_rows($res);
  $verif = mysql_query("SELECT * FROM user3 WHERE username='$username'");
  $iden = mysql_fetch_array($verif);
  $verified = $iden['status'];
  if( $count == TRUE && $row['username']==$username && $row['password']==$userpass && $verified['status=1']==TRUE &&  ) {
   $_SESSION['user3'] = $row['userid'];
   header("Location: home.php");
  } else {
   $errMSG = "Pastikan anda sudah <strong>terdaftar</strong> dan sudah memverifikasi <strong>akun</strong> anda.";
  }
 }
?>
    <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
    <html xmlns="http://www.w3.org/1999/xhtml">

    <head>
        <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
        <title>Ariigoh Login</title>
        <link rel="stylesheet" type="text/css" href="css/bootstrap.min.css" />
    </head>

    <body>

        <div class="container">

            <div id="login-form">
                <form method="post" autocomplete="off">

                    <div class="col-md-12">

                        <div class="form-group">
                            <h2 class="">Sign In to <kbd>Ariigoh Afnan Localhost</kbd></h2>
                        </div>

                        <div class="form-group">
                            <hr />
                        </div>

                        <?php
   if ( isset($errMSG) ) {

    ?>
                            <div class="form-group">
                                <div class="alert alert-danger">
                                    <span class="glyphicon glyphicon-info-sign"></span>
                                    <?php echo $errMSG; ?>
                                </div>
                            </div>
                            <?php
   }
   ?>

                                <div class="form-group">
                                    <div class="input-group">
                                        <span class="input-group-addon"><span class="glyphicon glyphicon-user"></span></span>
                                        <input type="text" name="uname" class="form-control" placeholder="Your Username" required />
                                    </div>
                                </div>

                                <div class="form-group">
                                    <div class="input-group">
                                        <span class="input-group-addon"><span class="glyphicon glyphicon-lock"></span></span>
                                        <input type="password" name="pass" class="form-control" placeholder="Your Password" required />
                                    </div>
                                </div>

                                <div class="form-group">
                                    <hr />
                                </div>

                                <div class="form-group">
                                    <button type="submit" class="btn btn-block btn-primary" name="btn-login">Sign In</button>
                                </div>

                                <div class="form-group">
                                    <hr />
                                </div>

                                <div class="form-group">
                                    <a href="register.php">Sign Up Here...</a>
                                </div>

                    </div>

                </form>
            </div>

        </div>

    </body>

    </html>

$row=mysql_fetch_array($res);

  $count = mysql_num_rows($res);
  $verif = mysql_query("SELECT * FROM user3 WHERE username='$username'");
  $iden = mysql_fetch_array($verif);
  $verified = $iden['status'];
  if( $count == TRUE && $row['username']==$username && $row['password']==$userpass && $verified['status=1']==TRUE &&  ) {
   $_SESSION['user3'] = $row['userid'];
   header("Location: home.php");
  } else {
   $errMSG = "Make a sure you already <strong>registered</strong> and verified your <strong>account</strong>";
  }