Untitled

<head>
  <meta charset="utf-8">
  <meta http-equiv="x-ua-compatible" content="ie=edge">
  <meta name="description" content="">
  <meta name="viewport" content="width=device-width, initial-scale=1">
  <title>Check Code</title>
  <link rel="stylesheet" href="css/normalize.css">
  <link rel="stylesheet" href="css/main.css">
</head>

<center>
  <form action="login.php" method="post">
    <h2>Check Code</h2>
    <p>
      <span>Username:</span>
      <input name="username" type="text" />
      <br/>
      <br/>
      <span> Password:</span>
      <input name="password" type="password" />
      <br/>
      <br/>
      <input name="go" type="submit" value="send" />
      <input name="reset" type="reset" value="clear" />
      <br/><br/>
      <a href="index.php">Mainpage</a>
    </p>
    <p>
      <?php

        $username = "";
        $username = isset($_POST['username']) ? $_POST['username'] : '';
        $password = "";
        $password = isset($_POST['password']) ? $_POST['password'] : '';
        $cookiecode = "";

        try
        {
          $db_auth = parse_ini_file("/srv/foodbar/.db_auth");
          $db = pg_connect("host=$db_auth[DB_HOST] port=5432 dbname=postgres user=$db_auth[DB_USER] password=$db_auth[DB_PASSWORD]");

          if($username != "")
          {
            $query="SELECT * FROM foodbar.users WHERE username = '$username' AND password = '$password'";
            $result = pg_query($query);

            if(pg_num_rows($result) > 0)
            {
              $is_login = true;
              $query="SELECT cookiecode FROM foodbar.users WHERE password = '$password' AND username = '$username'";
              $row = pg_fetch_assoc(pg_query($query));
              $cookiecode = $row['cookiecode'];

              echo 'Your code for a free cookie is:<br>';
              echo $cookiecode;
              echo '<br>';
              echo 'Incorrect? <a href="forgot.php">click</a>';
            }
            else
            {
              echo "Username or Password is wrong. <br>  Fill in again.";
            }
          }
          else
          {
            echo "Please fill in all fields!";
            echo '<br>';
            echo 'Forgot your password? <a href="forgot.php">Click Me</a>';
          }

        }
        catch (PDOException $e)
        {
          print ($e->getMessage());
          return false;
        }
      ?>
    </p>
  </form>
</center>