Login Script Problem.

Dette script fejler noget så grusomt.

Den logger brugeren ind, selv om han ikke findes i systemet. :(

Nogle der ved hvad der er galt?

include("inc/config.inc.php");

if(!$_POST{'user'}) { header("Location: index.php"); exit; }
if(!$_POST{'password'}) { header("Location: index.php"); exit; }

open_mysql_conn();

$usr = $_POST{'user'};
$pwd = md5($_POST{password});

$sql = "select * from das04_usrs where user = '$usr' AND password = '$pwd' limit 1";

if(!mysql_query($sql)) {
header("Location: index.php");
exit;
}
$pass = $_POST{'password'};
$user = $_POST{'user'};

session_start();

session_register("user");
session_register("password");

header("Location: home.php");