<?
include("link.php");
session_start();
if (isset($username)) {
  
  if(!($conn = mssql_connect(getenv('WEB_SEC_SERVER'),getenv('WEB_SEC_USER'),getenv('WEB_SEC_PASS')))) die(gettext("Ei saa ?hendust andmebaasiserveriga!"));
  if(!(@mssql_select_db(getenv("WEB_SEC_DB"),$conn))) die(gettext("Baasi valiku viga!"));

  $sql = "execute login @kasutaja='".substr(addslashes($username),0,30)."',@parool='".substr(addslashes(crypt($password,'$1$EHPUILKAY')),0,50)."',@sessid='".substr(addslashes(session_id()),0,50)."',@ip_addr='".getenv("REMOTE_ADDR")."'";

  if(!($result = @mssql_query($sql,$conn))) die(gettext("SQL s?ntaksi viga!"));
  if(@mssql_num_rows($result) < 1) die(gettext("Andmed puuduvad!"));
  $data = @mssql_fetch_row($result);
if ($data[0]>0) {
  session_register("logged_in");
  $logged_in = true;

  header("Location: ".sprintf("showpage.php?pageid=%s&PHPSESSID=%s",put("el/menu.php"),session_id()));

}
elseif($data[0]==-1) $teade="Logimine kinni keeratud";

else $teade="Vale parool v?i kasutajanimi";
//mssql_close($conn);
}

?>
<html>
<head>
- don't work (it dont give me anything). but when I change beginning to this it works ok:

<?
include("link.php");
session_start();
if (isset($username)) {
  $web_server = getenv('WEB_SEC_SERVER');
  $web_user = getenv('WEB_SEC_USER');
  $web_pass = getenv('WEB_SEC_PASS');
  
  if(!($conn = mssql_connect($web_server,$web_user,$web_pass))) die(gettext("Ei saa ?hendust andmebaasiserveriga!"));
  if(!(@mssql_select_db(getenv("WEB_SEC_DB"),$conn))) die(gettext("Baasi valiku viga!"));