[Fanseiten CMS] FanTalk v1

<?php
   $mysqlhost="localhost";
   $mysqluser="username";
   $mysqlpasswd="passwort";
   $mysqldbname="datenbankname";
   $mysqltable="login";
   $mysqlpwd="pwd";
   $mysqlname="name";


   $link = @mysql_pconnect($mysqlhost, $mysqluser, $mysqlpasswd);
   if ($link == FALSE) {
 	echo "<p><b>Keine verbindung zur fanseite möglich.";
 	echo "Bitte versuchen Sie es später noch einmal.</b></p>\n";
 	exit();
   }
   mysql_select_db($mysqldbname);


?>

?php
  session_start();


  include "mysql_connectinfo.php";


  if (isset($_SESSION['angemeldet']) || $_SESSION['angemeldet']) {
    header('Location: login-index.php');
    exit;
  }


  else if ($_SERVER['REQUEST_METHOD'] == 'POST') {


    $username = $_POST['username'];
    $passwort = $_POST['passwort'];


    $sql = mysql_query("SELECT $mysqlname FROM $mysqltable WHERE $mysqlname='$username' AND $mysqlpwd='$passwort'");
    $num = mysql_num_rows($sql);


    if ($num != 0) {
      $_SESSION['angemeldet'] = true;


      if ($_SERVER['SERVER_PROTOCOL'] == 'HTTP/1.1') {
        if (php_sapi_name() == 'cgi') {
          header('Status: 303 See Other');
        }
        else {
          header('HTTP/1.1 303 See Other');
        }
      }


      header('Location: login-index.php');
      exit;
    }
    else {
      echo "<p><b>Falsche Login-Daten!!</b></p>n";
    }
  }
?>
    <form action="login.php" method="post">
      <table border="0">
        <tr>
          <td>Username:</td>
          <td><input type="text" name="username" /></td>
        </tr>
        <tr>
          <td>Passwort:</td>
          <td><input type="password" name="passwort" /></td>
        </tr>
        <tr>
          <td> </td>
          <td><input type="submit" value="Einloggen" /></td>
        </tr>
      </table>
    </form>