can i also make a suggestion? if you're not using php for a while, why not break out of your php codes? ie change your script to:
<?xml version=\"1.0\" encoding=\"utf-8\"?>
<!DOCTYPE html PUBLIC \"-//W3C//DTD XHTML 1.1 Strict//EN\" \"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd\">
<html xmlns=\"http://www.w3.org/1999/xhtml\" lang=\"en-US\" xml:lang=\"en-US\">
<head>
<title>syst3m1337 :: Login</title>
<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />
<link rel=\"stylesheet\" type=\"text/css\" href=\"main.css\" />
</head>
<body>
<br />
<form action=\"login.php\" method=\"POST\">
<div align=\"center\">
<span class=\"label\">Username</span><input type=\"text\" name=\"username\" />
<br />
<span class=\"label\">Password</span><input type=\"password\" name=\"password\" />
<div align=\"center\">
<input class=\"button\" type=\"submit\" value=\"Login\" /><input class=\"button\" type=\"reset\" value=\"Clear\" />
</div>
</div>
</form>
<p>
<?php
function login($username, $password) {
$page = "private/index.php";
$TF = "F";
if ((($username != "") && ($username != "username")) || (($password != "") && ($password != "password"))) {
$TF = "W";
}
if (($username == "") || ($password == "")) {
$TF = "I";
}
elseif (($username == "username") && ($password == "password")) {
$TF = "C";
}
if ($TF == "F") {
print " Login...";
}
elseif ($TF == "I") {
print " You must enter a username and password.";
}
elseif ($TF == "W") {
print " Invalid Login. Either the username or password you entered is incorrect.";
print " <br />";
print " Please try again.";
}
elseif ($TF == "C") {
header("location:$page");
}
else {
print " ERROR. Please <a href=\"contact.php\">contact the webmaster</a>.";
}
}
print " </p>";
print " </body>";
print "</html>";
login($username, $password);
?>
and you can then get rid of all the \" 's and change them to just " 's too - but i couldnt be arsed to do it!