HabboWert.gq CMS Admin Panel Fehler

<?php
        ################################################################################
        ##                        ######## All rights reserved. @h  ###########          ## 
        ##                                    HabboWert Clone by Airport                   ##
        ################################################################################
        # Copyright 2015 - RetroTimes.in | Airport | HabboWert.ga CMS

        
ini_set('session.gc_probability', 1); 
ini_set('session.gc_divisor', 10000000); 
ini_set('session.gc_maxlifetime', 10000000); 
session_set_cookie_params(10000000,"/");

session_start();
error_reporting(E_ALL);
error_reporting(0);
        
header('Content-Type: text/html; charset=utf-8');

# Database Manager 
    $hostname = "meine.mysql.ip";
    $username = "Mein Login Name"; 
    $password = "Mein.Pw";
    $db = "Mein.DB.Name";  
    $port = "3306";

    
    $connection = mysqli_connect("$hostname", "$username", "$password", "$db", "$port");  
    if (mysqli_connect_errno($connection)) { echo "Fehler während der MySQLi Verbindung: " . mysqli_connect_error(); }
    
    if (isset($_SERVER['HTTP_X_REAL_IP'])) $_SERVER['REMOTE_ADDR'] = $_SERVER['HTTP_X_REAL_IP']; # Cloudflare

    
# Standard

    function PW_HASH($password){
                $password = utf8_decode($password);
                    $hash_secret = "xCg532%@%gdvf^5DGaa6&*rFTfg^FD4\$OIFThrR_gh(ugf*/";
                    $string = md5($password.($hash_secret));
                    return $string;
        }

        function UF_HASH($password){
            $hash_secret = "xCg532%@%gdvf^5DGaa6&*rFTfg^FD4\$OIFThrR_gh(ugf*/";
            $string = md5($password.($hash_secret));
            return $string;
        }
        
        function FilterText($str, $advanced=false) {
            if($advanced == true){ return mysqli_real_escape_string($connection, addslashes($str)); }
            $str = addslashes(htmlspecialchars($str));
            return $str;
        } 

        function HoloText($str, $advanced=false, $bbcode=false) {
            if($advanced == true){ return stripslashes($str); }
            $str = stripslashes(nl2br(htmlspecialchars($str)));
            return $str;
        }
        
        
# initialization

$ip = $_SERVER['REMOTE_ADDR'];
$remote_ip = $_SERVER['REMOTE_ADDR'];
$date_full = date('d.m.Y H:i:s');
$date_normal = date('d.m.Y');

############# Session Check ############# 

if(isset($_SESSION['username'])) {

    $rawname = FilterText($_SESSION['username']);
    $rawpass = FilterText($_SESSION['password']);

    $sql = $connection->query("SELECT * FROM users WHERE username = '".$rawname."' AND password = '".$rawpass."' AND banned != '1' LIMIT 1");
    
    if ($sql->num_rows < 1) {
        unset($_SESSION['username'], $_SESSION['password']);
        header("location: ".$path."/"); exit;
    }
    
    $user = $sql->fetch_object();

    $sql = $connection->query("SELECT * FROM users WHERE username '$rawname' AND banned = '1'");

    if($sql->num_rows > 0) {
        
        unset($_SESSION['username'], $_SESSION['password']);
        $_SESSION['error'] = "Du bist gebannt und aus der Community ausgeschlossen.";
        header("location: ".$path."/"); exit;        
    }
    
    $_SESSION['login'] = "true";
    $my_id = $user->id;
    $name = $user->username;

} else { $user->username = "Gast"; }
        
?>