Some help with login script

<?php
header('Content-Type: text/vnd.wap.wml, true'); 
echo '<?xml version="1.0" encoding="ISO-8859-1"?> 
<!DOCTYPE wml PUBLIC "-//WAPFORUM//DTD WML 1.1//EN"  
"http://www.wapforum.org/DTD/wml_1.1.xml">'; 
?>


<wml>

<card id="login1" title="login">
<p align="center">

<?php
      // connect to mysql database
      require($_SERVER["DOCUMENT_ROOT"]."/config/db_config.php");
  $connection = mysql_connect($db_host, $db_user, $db_password) or die("error connecting");
  mysql_select_db($db_name, $connection);
  ?>
<p>

<p>User Login Form</p>

<form action="login1.php" method="POST">
<p><STRONG>Username:</STRONG><br>

<input type="text" name="username"></p>

<p><strong>Password:</strong><br>

<input type="text" name="password"></p>

<p><input type="submit" name="submit" value="go">

<do type="accept">
<go href="login1.php" method="post">
<postfield name="username" value="$(username)"/>
<postfield name="password" value="$(password)"/>
</go>

/do>

<a href="home.php">Back</a>
</p>
</card>

</wml>

    
    <?php
header('Content-Type: text/vnd.wap.wml, true'); 
echo '<?xml version="1.0" encoding="ISO-8859-1"?> 
<!DOCTYPE wml PUBLIC "-//WAPFORUM//DTD WML 1.1//EN"  
"http://www.wapforum.org/DTD/wml_1.1.xml">'; 
?>

<wml>
<card id="login2" title="login2">
</p>

<?php
//check for required fields from the form
if ((!$_POST[username]) || (!$_POST[password])) {
	header("Location: login.php");
	exit;
}

//connect to server and select database
 require($_SERVER["DOCUMENT_ROOT"]."/config/db_config.php");
  $connection = mysql_connect($db_host, $db_user, $db_password) or die("error connecting");
  mysql_select_db($db_name, $connection);

//create and issue the query
$sql = "select f_name, l_name from owner_details where username = '$_POST[username]' AND password('$_POST[password]')";
$result = mysql_query($sql,$connection) or die(mysql_error());

//get the number of rows in the result set; should be 1 if a match
if (mysql_num_rows($result) == 1) {

	//if authorized, get the values of f_name l_name
	$f_name = mysql_result($result, 0, 'f_name');
	$l_name = mysql_result($result, 0, 'l_name');

	//set authorization cookie
	setcookie("auth", "1", 0, "/", "yourdomain.com", 0);

	//create display string
	$display_block = "<P>$f_name $l_name is authorized!</p>
	<p>Authorized Users' Menu:
	<ul>
	<li><a href=\"resultpage.php\">secret page</a>
	</ul>";

} else {

	//redirect back to login form if not authorized
	header("Location: login.php");
	exit;
}
?>
<a href="home.php">Back</a>
</p>

</card>
</wml>