Hello Kathy,
I'd like to suggest something. Why don't you try this algorithm.
begin-------------------------
<?
if (isset($submit)) {
if(verify($user,$password)) {
Header("Location: secure.page.php?xxxx");
}//if
else {
if (empty($user) || empty($password)) {
$message ="please provide a username and password.";
}
else {
$message="invalid username/password";
}
}
}
?>
<form method = post action = <? echo $PHP_SELF ?>>
USERNAME:<input type = text name="user" value="">
PASSWORD:<input type=password name="password">
<input type = submit value="Login" name="submit">
</form>
----------------------end....
try it and see for your self..
ok?