Hello,

not a PHP developer...

I already have:
<?php <br />// Start Session
if(!session_id()) session_start();

require_once("include/mysql.php");

// Check if User is logged in
if(isset($_SESSION['logged_in']) && $_SESSION['logged_in'] = true){
header("Location: members/cowgirls-welcome.php");
exit;
}


//if the login form is submitted
if (isset($_POST['submit_y'])) { // if form has been submitted

// makes sure they filled it in
if($_POST['username'] == '' || $_POST['pass'] == '') {
$_SESSION['message'] = 'Please fill in Username and Password.';
header("Location: index.php");
exit;
}

// checks it against the database
$_POST['username'] = mysql_real_escape_string($_POST['username']);


$check = mysql_query("SELECT * FROM users WHERE username = '".$_POST['username']."'")or die(mysql_error());

//Gives error if user dosen't exist
$check2 = mysql_num_rows($check);

if ($check2 == 0)
{
$_SESSION['message'] = 'That user does not exist in our database.

Try again, or Click Here to Register';
header("Location: index.php");
exit;
}

while($info = mysql_fetch_array( $check ))
{
$_POST['pass'] = stripslashes($_POST['pass']);
$info['password'] = stripslashes($info['password']);

//gives error if the password is wrong
if ($_POST['pass'] != $info['password']) {
$_SESSION['message'] = 'Incorrect password, please try again.';
header("Location: index.php");
exit;
} else if($info['active'] !=1) {
$_SESSION['message'] = 'Account '.$_POST['username'].' is not active';
header("Location: index.php");
exit;
} else if($info['auth'] != 1){
$_SESSION['message'] = 'Account '.$_POST['username'].' is not authenticated.';
header("Location: index.php");
exit;
}

//then redirect them to the members area
$_SESSION['logged_in'] = true;
$_SESSION['user_level'] = $info['level'];

if ($info['level'] == 1){
header("Location: members/queens-welcome.php");
exit;
} else {
header("Location: members/cowgirls-welcome.php");
}
}
}

?>

where do I add the IU php code? above, below?

Thanks,

John