connexion membres

<?php

session_start();

include ('config.php');

$connect=mysql_connect($serveur,$utilisateur,$mdp);

mysql_select_db($bdd, $connect);

?>



<?php

$action = isset($_POST['action']) ? $_POST['action'] : '';  

$login = isset($_POST['login']) ? $_POST['login'] : '';

$pass = isset($_POST['pass']) ? $_POST['pass'] : '';



if ($action !=1 ) {

echo 'Veuillez entrer votre Login et Mot de Passe:<br />';

echo '<form action="'.$_SERVER['REQUEST_URI'].'" method="post">';

echo '<input type="hidden" name="action" value="1">';

echo 'Login: <input type="password" name="login"><br />';

echo 'Passe: <input type="password" name="mdp"><br />';

echo '<input type="submit" value="Connexion">';

echo '</form>';

                  }



if ($action == 1) {

$q = mysql_query("SELECT * 

                  FROM membres 

                  WHERE login='$login' 

                  AND pass='$mdp'"

				  );

$n = mysql_num_rows($q);



    if ($n == 1 AND $login != "" AND $mdp != "")

       {

       $_SESSION['login_session'] = $login;

       header("location: membre.php");

       }



         else{

echo 'Veuillez entrer votre Login et Mot de Passe:<br />';

echo '<form action="'.$_SERVER['REQUEST_URI'].'" method="post">';

echo '<input type="hidden" name="action" value="1">';

echo 'Login: <input type="password" name="login"><br />';

echo 'Passe: <input type="password" name="mdp"><br />';

echo '<input type="submit" value="Connexion">';

echo '</form>';



die('<font color="red">Informations incorrectes!');

           }

         }

?>