Untitled

<body class="login-body">
  <div class="login-container">
	<div id="login-form">
	<h3>Login</h3>
	<fieldset>
	  <form action="<?php echo $_SERVER['PHP_SELF']; ?>" method="post">
		<input name="username" type="text" maxlength="20" placeholder="Enter your provided username" required autofocus>
		<input name="password" type="password" maxlength="25" placeholder="Enter your password" required>
		<input type="submit" name="login" value="Login">
	  </form>
	</fieldset>
	</div>
  </div>
</body>

<?php

} else {

	$_username = $_POST['username'];
	$_password = md5($_POST['password']);

	if (!isset($_username) ||
	    !isset($_password) ||
	    !ctype_alnum($_username) ||
	    strlen($_username) > 10 ||
	    strlen($_username) <= 3 ||
	    strlen($_password) <= 3 ||
	    strlen($_password) > 16 ||
	    !ctype_alnum($_password)
	) {
	    header('Location: http://media1.mystcp.pw/');
	}

	$_username = mysqli_real_escape_string($_mysql, $_username);
	$_password = mysqli_real_escape_string($_mysql, $_password);

	$_username = addslashes($_username);
	$_password = addslashes($_password);

	$_beta_check = mysqli_query($_mysql, "SELECT * FROM users WHERE username='" . $_username . "';");
	$_result = mysqli_fetch_assoc($_beta_check);

    if ($_result['username'] == $_username && $_result['password'] == $_password) {