Pasted

<?php
session_start();
if(isset($_SESSION['username'])){ ?>
<iframe src="http://RieqyNS13.freeshoutbox.net/" width="1000" height="1000"></iframe>
<?php } ?>
<html>
<head>
<style type="text/css">
legend{
border:dashed 1px #000;
}
fieldset{
position:fixed;
border:dashed 1px #000;
}
input{
border:dashed 1px #000;
}
body{
margin:0;
}
</style>
</head>
</html>
<?php
$kon = mysql_connect('127.0.0.1', 'root', '') or die(mysql_error());
mysql_select_db('user', $kon) or die(mysql_error());
if(isset($_POST['btnSubmit'])){
    if(!empty($_POST['txUser']) && !empty($_POST['txPass'])){
            $user = trim(mysql_real_escape_string($_POST['txUser']));
            $pass = trim(mysql_real_escape_string($_POST['txPass']));
            $passwd = md5($pass);
            $sql = "SELECT * FROM user WHERE user='$user' AND pass='$passwd';";
            $sql2 = @mysql_query($sql);
            if(@mysql_num_rows($sql2)>=1){
                $_SESSION['username'] = $user;
            }else{
                $status = "user tak terdaftar";
            }
        }else{
            $user = null;
            $pass = null;
            $status = "<span style='font-size:12px;'>user atau pass masih kosong</span>";
        }
}else{
    $user = null;
    $pass = null;
    $status = null;
 
}
if(!isset($_SESSION['username']) || empty($_SESSION['username'])){?>
    <form action="<?php $_SERVER['PHP_SELF']; ?>" method=POST>
    <fieldset><legend>login member</legend>
    <table>
    <tr><td><label for="user">user</label></td><td><input type="text" name="txUser" value="<?php echo $user; ?>"></td></tr>
    <tr><td><label for="pass">pass</label></td><td><input type="password" name="txPass" value="<?php echo $pass; ?>"></td></tr>
    </table>
    <input type="submit" value="login" name="btnSubmit">
    <label for="status"><?php echo $status; ?></label>
    </fieldset>
    </form>
<?php }else{ ?>
<body>
<iframe src="http://RieqyNS13.freeshoutbox.net/" width="1000" height="1000"></iframe>
</body>
<?php } ?>