login script info dont match

[troubleshoot]

everytime i try to login, i recieve "'The name and password entered do not match those on file."

can anybody help fix this please

<?php

if (isset($_POST['submitted'])) {

require_once ('./mysql_connect.php'); 
function escape_data ($data){
global $dbc; 
if(ini_get('magic_quotes_gpc')){
$data = stripslashes($data);
}
return mysql_real_escape_string
(trim($data), $dbc);
}    
    $errors = array();
    
    
    if (empty($_POST['first_name'])) {
        $errors[] = 'You forgot to enter your Name.';
    } else {
        $fn = escape_data($_POST['first_name']);
    }
    
    

    
    if (empty($_POST['password'])) {
        $errors[] = 'You forgot to enter your password.';
    } else {
        $p = escape_data($_POST['password']);
    }
    
    if (empty($errors)) { // If everything's OK.

    
$query = "SELECT id, name, runing FROM user WHERE name='$fn' AND pass=SHA('$p')";        
        $result = @mysql_query ($query); 
        $row = mysql_fetch_array ($result, MYSQL_NUM); 

        if ($row) { 
                
            
    if($row['2'] == "Stop"){
$page_title = 'Login';
include ('./main.html');
echo '<font size="8" color="red">Sorry but your account but been stop <P>by the administrator of this web page</font>';
include ('./end.html');
exit();}
setcookie("bank", $row[1], time()+3600);

//session_name ('bank_ID');
            //session_start();

    
            //$_SESSION['name_ID'] = $fn;
            

            header("Location: ./index.php");

            exit(); 
                
        } else { 
            $errors[] = 'The name and password entered do not match those on file.'; 
            
        }
        
    } 
        
    mysql_close(); 

} else { 

    $errors = NULL;

} 


$page_title = 'Login';
include ('./main.html');

if (!empty($errors)) { 
    echo '<h1 id="mainhead">Error!</h1>
    <p class="error">The following error(s) occurred:<br />';
    foreach ($errors as $msg) { 
        echo " - $msg<br />\n";
    }
    echo '</p><p>'.strval($pass).'Please try again.</p>';
}


?>
<h2>Login</h2>
<form action="login.php" method="post">
<p>SL Name: <input type="text" name="first_name" size="25" maxlength="40" /> </p>

    
<p>Password: <input type="password" name="password" size="25" maxlength="20" /></p>
    <p><input type="submit" name="submit" value="Login" /></p>
    <input type="hidden" name="submitted" value="TRUE" />
<a href="./setup.php"><font color="##ffffff">[</font> Free Sign-up <font color="##ffffff">]</font></a>
</form>
<?php
include ('./end.html');
?>

[srisa]

Echo out your query before running it. If it doesn't execute print the mysql_error() to see what is the error, if there is any.