[zomgwtfbbq]

Haven't known about stripslashes() before, I am just using mysql_real_escape_string(), do I really need both?
thx for sharing

Depends on your php settings.

@OP:
1- why do you use output buffering?
2- the script is vulnerable to bruteforcing, ALWAYS use the sleep() function after a failed login in order to delay the server's response.

[TheDarkNight]

Haven't known about stripslashes() before, I am just using mysql_real_escape_string(), do I really need both?
thx for sharing

The Stripslashes will help protect against xss to some degree and you should also be using mysqli because mysql is deprecated.

[TheDarkNight]

Haven't known about stripslashes() before, I am just using mysql_real_escape_string(), do I really need both?
thx for sharing

The Stripslashes will help protect against xss to some degree and you should also be using mysqli because mysql is deprecated.

[iDF-Gerador]

very very nice , thx for this tutorial , it's very good , thx again )) ^_^