Best way to do a login? [Advice Needed, Not Help]

[visualAd]

I am glad I am not your client

• It is not very secure as you are not escaping the variables. Well, you are but after you have put them inside the string.
• If you receive and error while connecting, you should end the script not echo a message and try to continue.
• Why use Javascript to redirect the page, why not just use:
  

  header('Refresh: 3; url=' . $path_to_new_script); 

• Your script should when it fails redirect the user to an error page rather than displaying a single line, unfriendly error message.