Hilfe bei php Loginformular

<?
}	


if(!isset($_REQUEST['username']) || ($_REQUEST['username']=="") || !isset($_REQUEST['pwd']) || ($_REQUEST['pwd']=="") || !isset($_REQUEST['sys_user_type']) )
{
 header("Location: ". "signin.php?errmsg=".urlencode("Please enter login."));
 die();
}
	if($_REQUEST['sbuser_type']=='w')
		$sbuser_type=1;			//////////For Customer
	else
		$sbuser_type=2;			//////////For Business


		if (!get_magic_quotes_gpc()) 
		{
			$username=str_replace('$', '\$',addslashes($_REQUEST["username"]));
			$pwd=str_replace('$', '\$',addslashes($_REQUEST["pwd"]));
		}
		else
		{
			$username=str_replace('$', '\$',$_REQUEST["username"]);
			$pwd=str_replace('$', '\$',$_REQUEST["pwd"]);
		}



$sql = "SELECT * FROM users WHERE sys_username = '$username' AND sb_password = '$pwd' and  sys_user_type=$sys_user_type";


$rs_query=mysql_query($sql);
if ( $rs=mysql_fetch_array($rs_query)  )
{
	if($rs["sb_suspended"]=="no")
	{
		if($rs["sb_password"]===$_REQUEST['pwd'])
		{
			$_SESSION["sbprj_username"]=$rs["sb_username"];
			$_SESSION["sbprj_userid"]=$rs["sb_id"];
			$_SESSION["sbprj_usertype"]=$rs["sb_user_type"];

			mysql_query("update sbprj_members set sb_last_login='".date("YmdHis",time())."' where sb_id=".$rs["sb_id"]);


 			if(isset($_REQUEST["return_path"]) && preg_match("/view_private.php$/",$_REQUEST["return_path"]) && isset($_REQUEST["id"]) && is_numeric($_REQUEST["id"]) )
  			{
				$return_path=$_REQUEST["return_path"]."?sb_id=".$_REQUEST["id"];
				header("Location: $return_path");
				die();
			}


			include_once "template.php";
			die();
		}
		else
		{
			header("Location: signin.php?errmsg=". urlencode("Please enter correct login.") );
			die();
		}
	}//not suspended
	elseif($rs["sb_suspended"]=="new")
	{
		header("Location: gen_confirm.php?errmsg=". urlencode("member account is awaiting.") );
		die();
	}
	else
	{
		header("Location: gen_confirm.php?errmsg=". urlencode("member account has been suspended.") );
		die();
	}
}


header("Location: signin.php?errmsg=". urlencode("Please enter correct login.") );
die();
?>