Linux, Apache, MySQL, PHP

<?php
        //FOLDERS
        //create array for each directory
        $pathDIR = "dirname/";
        $DIR = Array(
        );
        //store directory names into an array with foreach
        foreach (glob($pathDIR . '/[0-30]*', GLOB_ONLYDIR) as $dirname) {
            $DIR[] = $dirname;    
        }
        //display path directories
        for($a = 0; $a < count($DIR); $a++) {
            echo $DIR[$a];   
        }
        //FILES
        //create array for each directory
        $pathFILE = Array();
        //create array for files    
        $files = Array();            
        //loop start
        for($b = 1; $b <= count($DIR); $b++) {
            $pathFILE[$b] = "dirname/" . $b . "/"; 
            //store files in array with foreach
            foreach(glob($pathFILE[$b] . '*.jpg') as $filename) {
                $files[] = $filename;
            }
        }
        //display files
        for($c = 1; $c <= count($files); $c++) {
            echo $files[$c-1];
        }
        ?>

array_push ($DIR, $file);

for($d = 0; $d <= count($DIR); $d++) {
    for($e = 0; $e <= count($DIR[$d]); $e++) {
        echo $DIR[$d][$e];
    }
}  

   $strSQL = "SELECT u.empl_first, u.username, u.empl_first +' '+ empl_last as fullname, e.Department, e.UnitName, e.empnum FROM users u inner join Employee e on u.Employee_Id = e.EmpNum inner join tblTBA t on u.Employee_Id = t.Employee_Id WHERE USERNAME = '".ms_escape_string($_POST['user'])."'
	and PASSWORD = '".ms_escape_string($pass)."' ";
//	echo $strSQL;
	$sqll = sqlsrv_query($con, $strSQL);

if ($objResult = sqlsrv_fetch_array($sqll, SQLSRV_FETCH_ASSOC)) {
    $firstname = $objResult["empl_first"];
 	$_SESSION["username"] = $objResult["username"];
	header('location:registered.php?user=' . urlencode($firstname));
  }
  If ($user == $_SESSION["username"]) {
    header("location:register.php?user='".ms_escape_string($user)."'&pass='".ms_escape_string($pass)."' ");
  }
  else
  {
  echo "Username and Password Incorrect!";
  }