In looking at the get_input section up top I see:
Code:
// ALl of these must be escape if used in sql
$Loginname = get_input("Loginname","post");
$Loginpass = get_input("Loginpass","post");
$firstlogin = get_input("firstlogin","post");
$buttlogin = get_input("buttlogin","post");
$Email = get_input("Email","post");
$buttforgot = get_input("buttforgot","post");
$rememberme = get_input("rememberme","post");
$form = get_input("from","post");
Should that last line be:
$from = get_input("from","post");
I don't see the $form being used on that page, but it looks like $from is used.