Untitled

<?php session_start(); ?>
<html><head><link href="main.css" rel="stylesheet" type="text/css" /></head><html>
<?php
include_once("connect.php");
if(isset($_POST['submit'])) {
        $username = $_POST['username'];
        $password = $_POST['password'];
    if(isset($_POST['username']) && isset($_POST['password'])) {
        $password = stripslashes($password);
        $username = stripslashes($username);
        $username = mysql_real_escape_string($username);
        $password = mysql_real_escape_string($password);
        $row = mysql_query("SELECT * FROM login WHERE username='".$username."' AND password='".$password."' LIMIT 1");
        if(mysql_num_rows($row) > 0 ) {
            $_SESSION['loggedin'] = true;
            $_SESSION['username'] = $username;
            echo "Login Success!";
            header("Location:index.php?page=home");
        } else {
        echo "WRONG USERNAME/PASSWORD";
        }
    }
} else {
echo '<form action="login.php" method="post">
<table bgcolor="#111" width="274" border="0" align="center">
  <tr>
    <td colspan="2" align="center" bgcolor="#333">Please Login</td>
  </tr>
  <tr>
    <td width="94" align="center" bgcolor="#333">Username:</td>
    <td width="170" align="center" bgcolor="#333"><input type="text" name="username"></td>
  </tr>
  <tr>
    <td align="center" bgcolor="#333">Password :</td>
    <td align="center" bgcolor="#333"><input type="password" name="password"></td>
  </tr>
  <tr>
    <td colspan="2" align="center" bgcolor="#333"><input type="submit" name="submit" value="login"></td>
  </tr>
</table>
</form>';
}
?>