Problem With This Script. [URGENT ATTENTION!!!]

<?
require('config.php');
require('bar.php');

if($userData[user] !="" && $userData[pass] !=""){
  if($userData[rank] =="0"){
    Echo"<b>Error:</b> You no longer are employed at $shortDomain - If you are
    caught DJing after now, you will be banned from our website, and reported
    to our partner websites. Your career of DJing on Habbo Fansites will
    be destroyed. You are welcome to get more experience, and apply next time
    applications open.


    <hr width='100%' height='1' color='#000000' shade='no'>
    <u>Message from Administration:</u><br>
    $userData[msg]";
    exit;
  }
  
  Echo"You are already logged in. Please use the staff login bar at the top
  of this page to navigate.<br>";
  exit;
}

switch($_GET['act']){
default:
  Echo"<center><b>Staff Login</b></center>
  This is the $websiteName Staff Login. Only DJ's and Administrators have an
  account, please do not try and brute force into a staff members account.
  If you forgot your password, please use the
  <a href='contact.php'>contact forms</a>.
  
  <hr width='100%' height='1' color='#000000' shade='no'>
  
  <form method='post' action='login.php?act=submit'>
  <table>
  <tr>
    <td>Username:</td>
    <td><input type='text' name='user' size='20'></td>
  </tr>
  <tr>
    <td>Password:</td>
    <td><input type='password' name='pass' size='20'></td>
  </tr>
  <tr>
    <td></td>
    <td><input type='submit' value='Login'></td>
  </tr>
  </table>
  </form>";
break;

case"submit":
  $user = $_POST['user']; $pass = $_POST['pass'];
  $pass = md5($pass);
  
  // Validity
  $validityQuery = mysql_query("SELECT * FROM users WHERE user ='$user' AND pass ='$pass'");
  if(mysql_num_rows($validityQuery) =="0"){
    Echo"<b>Error:</b> Invalid Username/Password Combination<br>
    If you have been hired, and you typed in your information corrently,
    DO NOT WORRY! This simply means your account wasn't completely created.
    Please use our <a href='contact.php'>contact</a> form. Tell us your desired
    username and password and we will check it against Application Logs. Before
    you do that, please try again and type your password in more carefully.
    Your username is your Habbo Hotel name. <br><br>
    - <a href='login.php'>Back</a>";
    exit;
  }
  $validityData = mysql_fetch_array($validityQuery);
  
  $_SESSION["user"] = $validityData[user];
  $_SESSION["pass"] = $validityData[pass];
  
  Echo"<b>You are now logged in, click <a href='login.php'>here</a> to refresh.
  (Allows Staff Bar to Load)";
break;

}
?> 

<?PHP

session_start();

// Install Variable
$installed ="Y"; // Y/N

// Connect
mysql_connect ("", "", "");
mysql_select_db ("");

// Domain Vars
$shortDomain = "";
$wwwDomain = "smileyoureahabbo.freepgs.com";
$longDomain = "http://smileyoureahabbo.freepgs.com";
$websiteName = "smileyoureahabbo.net.tf";
$adminEmail = "smileyoureahabbo.net.tf";

// Radio Vars
$scdef = "";
$scip = "";
$scport = "";
$scpass = "";

// Allow Important.php
$check = "10245";

require('important.php');

?>

<?
require('config.php');

if($userData[user] =="" || $userData[pass] ==""){
  Echo"Username: Not Logged In - Click <a href='login.php'>here</a> to login.
  <hr width='100%' height='1' color='#000000' shade='no'>";
}else{
  if($userData[rank] =="0"){
    $linksVar ="You are no longer staff at $websiteName, Sorry.";
  }else{
    $linksVar ="| <a href='requests.php'>Request Line</a> |
                <a href='info.php'>Radio Info</a> |
                <a href='rules.php'>DJ Rules</a> |
                <a href='cps.php'>Control Panels</a> |
                <a href='message.php'>DJ Says</a> |";
  }
  
  Echo"User: $userData[user] $linksVar
  <hr width='100%' height='1' color='#000000' shade='no'>";
}

?>