Linux, Apache, MySQL, PHP

<?php echo '<div id="errors">'.$err.'</div>'; ?><br/>
<table><tr><td>
<form method="post" action="login_go.php">Username:
</td><td>
<input typ="text" name="user">
</td></tr><tr><td>
Password:
</td><td>
<input type="password" name="passcode">
</td></tr><tr><td>
<input type="submit" value="Log In"></td></tr></table><br/>

<?php
session_start();
Include("connect.php");
		$username = ($_POST['user']);
		$password = md5($_POST['passcode']); 
		$q = mysql_query("SELECT * FROM users WHERE user = '$username' AND pass = '$password'") or die (mysql_error()); 
		$r = mysql_num_rows($q);

		if ($r == 1) {
			$_SESSION['logged'] = TRUE;
			$_SESSION['user'] = $username;
			$_SESSION['email'] = $email;
			$_SESSION['date'] = $joined;
			header("Location: members.php");
			exit(); // Stops the rest of the script.
		} else { 
			 $err.='Incorrect username/password!'; 
			Include("login.php");
		}
?>