Login olmuyor

<?php
if(isset($_POST['submit'])) {                    
    $username = $sec->secure($_POST["id"]);
    $password = md5($sec->secure($_POST["pw"]));
    $query = odbc_exec($sqlac, ("SELECT * FROM TB_User WHERE StrUserID='$username'"));
    $row = odbc_fetch_array($query);
    $check = odbc_exec($sqlac, ("select * from TB_User where StrUserID = '$username' and password = '$password'"));
        if (odbc_num_rows($check) != 1) {
            echo '<script type="text/javascript">';
            echo ' alert("Invalid password!");';
            echo '</script>';
        } else {
            $_SESSION['JID'] = $row['JID'];
            $_SESSION['username'] = $username;
            $_SESSION['userrank'] = $row['sec_content'];
            header("location:./");
            
        }
    }
if(isset($_SESSION['username'])) {
    $total_silk = 0;
    $query = odbc_exec($sqlac, ("select * from SK_Silk where JID = '".$_SESSION['JID']."'"));
     while ($row = odbc_fetch_array($query)) {
    $total_silk += $row['silk_own'] + $row['silk_gift'] + $row['silk_point'];
    }
        echo "<div id='box1c'>
      <div style='color:#fff0a9;font-size:18px;margin:10px 15px 0;text-align:center;'>Welcome, $_SESSION[username].</div>
      <div class='coins_text_format rtl' style='margin-top:5px;'>Silk</div>
      <div class='coins_value_format rtr' id='pc_am' style='margin-top:5px; background:#25130a url(img/pc.png) 3px 3px no-repeat;'>$total_silk</div>
        
      <div onclick='location=\"./?pg=team\"' id='donate' class='left_panel_format rtl' style='margin-left:17px; margin-top: 5px;'>GAME TEAM</div>
      <div onclick='location=\"./?pg=changepw\"' id='myacc' class='left_panel_format rtr'  style='margin-top: 5px;'>CHANGE PASSWORD</div>
      <div onclick='location=\"./?pg=logout\"' id='loff' class='left_panel_format rbl'  style='margin-left:17px;color:#544b3d;'>SIGN OUT</div>
      <div onclick='location=\"./?pg=donate\"' id='myfrnd' class='left_panel_format rbr' >DONATE</div>    
    </div>";
    } else {
        echo"
        <form method='post' >
    <div id=box1a>
      <div style='width:10px;height:10px;margin:20px 15px;float:left;'>
        <input name='id' id=un type=text class=log_imp>
        <input name='pw' id=pw type=password class=log_imp>
      </div>
      <input  type='submit' value='' name='submit' id='login' style='border:none;' />
      <div style='height:40px;margin:80px 0 0 14px;width:230px;'>
        <div id=reg onclick='location=\"./?pg=register\"' >REGISTER</div>
        <div id=fpw onclick='location=\"./?pg=changepw\"' >FORGOT PASS?</div>
      </div>
    </div>    </form>
";    }
?>