Cleaned HTML, moved everything out of source. Index.php is now close to identical to login.php. will clean later. A lot of addslashes replaced with mysql_escape_string
added js and html