Problem after login into system

this is my ftp pictures: http://i42.tinypic.com/29v09x0.jpg
here you can see my index.php file :

Code:

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<?php

include_once("config.php");

// Check user not logged in already:
checkLoggedIn("no");

// Page title:
$title="Member Login Page";

// if $submit variable set, login info submitted:
if(isset($_POST["submit"])) {
//
// Check fields were filled in
//
// login must be between 4 and 15 chars containing alphanumeric chars only:
field_validator("login name", $_POST["login"], "alphanumeric", 4, 15);
// password must be between 4 and 15 chars - any characters can be used:
field_validator("password", $_POST["password"], "string", 4, 15);

// if there are $messages, errors were found in validating form data
// show the index page (where the messages will be displayed):
if($messages){
doIndex();
// note we have to explicity 'exit' from the script, otherwise
// the lines below will be processed:
exit;
}

// OK if we got this far the form field data was of the right format;
// now check the user/pass pair match those stored in the db:
/*
If checkPass() is successful (ie the login and password are ok),
then $row contains an array of data containing the login name and
password of the user.
If checkPass() is unsuccessful however, $row will simply contain
the value 'false' - and so in that case an error message is
stored in the $messages array which will be displayed to the user.
*/
    if( !($row = checkPass($_POST["login"], $_POST["password"])) ) {
// login/passwd string not correct, create an error message:
        $messages[]="Incorrect login/password, try again";
    }

/*
If there are error $messages, errors were found in validating form data above.
Call the 'doIndex()' function (which displays the login form) and exit.
*/
if($messages){
doIndex();
exit;
}

/*
If we got to this point, there were no errors - start a session using the info
returned from the db:
*/
cleanMemberSession($row["login"], $row["password"]);

// and finally forward user to members page (populating the session id in the URL):
header("Location: members.php");
} else {
// The login form wasn't filled out yet, display the login form for the user to fill in:
doIndex();
}

/*
This function displays the default 'index' page for this script.  This consists of just a simple
login form for the user to submit their username and password.
*/
function doIndex() {
/*
Import the global $messages array.
If any errors were detected above, they will be stored in the $messages array:
*/
global $messages;

/*
also import the $title for the page - note you can normally just declare all globals on one line
- ie:
global $messages, $title;
*/
global $title;

// drop out of PHP mode to display the plain HTML:
?>
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">



<head>
<title><?php print $title; ?></title>
<meta http-equiv="content-type" content="text/html; charset=utf-8" />


<link rel="stylesheet" href="style.css" type="text/css" media="screen" />



<link rel="stylesheet" href="fx.slide.css" type="text/css" media="screen" />

<script type="text/javascript" src="js/mootools-1.2-core-yc.js"></script>

<script type="text/javascript" src="js/mootools-1.2-more.js"></script>
<script type="text/javascript" src="js/fx.slide.js"></script>


</head>
<?php doCSS(); ?>
<body>
<?php
// if there are any messages stored in the $messages array, call the displayErrors
// function to output them to the browser:
if($messages) { displayErrors($messages); }

/*
PHP_SELF:
The $_SERVER superglobals variable $PHP_SELF is one of the most useful predefined variables in PHP.
It contains the URI (uniform resource indicator) of the current script.
For example if this script is at http://example.com/somedir/join.php, then $_SERVER["PHP_SELF"] will contain:
/somedir/join.php

This is very useful because it means if you change the name of the script, you don't have to change every reference
to the script in <form> tags - $_SERVER["PHP_SELF"] automatically includes the current script URI!
*/
?>

<div id="login">
<div class="loginContent">
<form action="<?php print $_SERVER["PHP_SELF"]; ?>" method="post">
<label for="log"><b>Username: </b></label>
<input class="field" type="text" name="login" id="log" value="<?php print isset($_POST["login"]) ? $_POST["login"] : "" ; ?>" maxlength="15" />
<label for="pwd"><b>Password:</b></label>
<input class="field" type="password" name="password" id="pwd" value="" maxlength="15" />
<input type="submit" name="submit" value="" class="button_login" />
<input type="hidden" name="redirect_to" value=""/>
</form>
<div class="left">
<label for="rememberme"><input name="rememberme" id="rememberme" class="rememberme" type="checkbox" checked="checked" value="forever" /> Remember me</label></div>
<div class="right"> <a href="#">Lost your password?</a></div>
</div>
<div class="loginClose"><a href="#" id="closeLogin">Close Panel</a></div>
</div> 

<div id="container">
<div id="top">

<ul class="login">
<li class="left"> </li>
<li>Hello Guest!</li>
<li>|</li>
<li><a id="toggleLogin" href="#">Log In</a></li>
</ul> 
</div> 

<div class="clearfix"></div>

<div id="content">
<ul dir="rtl">
<li dir="rtl">
<p style="margin-top: 60px; text-align:justify" dir="rtl">برای
ورود به بخش مدیریت روی گزینه ی <b>log in</b> در بالا کلیک نمایید.</p>
</li>
<li dir="rtl">
<p style="margin-top: 60px; text-align:justify" dir="rtl">بعد از
اتمام کار در بخش مدیریت لطفا به <b>صورت کامل</b> از سیستم خارج
شوید.</p></li>
<li dir="rtl">
<p style="margin-top: 60px; text-align:justify" dir="rtl">اگر از
سیستمی خارج از سیستم شخصی خود وارد پنل مدیریت می شوید روی گزینه
ی " remember me " کلیک <b>نکنید</b>.</p></li>
</ul>
</div>
<p>
</p>
<div class="clearfix"></div>
</div>

</body>

</html>
<?php
}
?>