ERRO Login

<?php
@session_start();
$kullanici2 = $_SESSION['login'];
if (!isset($_SESSION['login'])) {
echo '
<form id="login" action="loginonay.php" name="login" method="post"  target="_self" >
                  <div>

                     <div align="center">
                       <p> </p>
                       <p>
                         <input class="input_login" type="text" name="kadi"  placeholder="Kullanici Adi" value=""  />
                       </p>
                       <p> </p>
                       <p>
                         <input class="input_login" type="password" name="pw"  placeholder="Sifre" value=""  />
                       </p>
                     </div>
                     <div class="sb-sep"></div>
                       <p><div align="left">          
                         <p>          <a href="index.php?git=lostpw"><img src="./images/ico_remind.png"> Şifremi unuttum! </a><a href="index.php?=lostpw" class="remind"></a><br/>
                       <a href="index.php?git=kayitol" class="register"><img src="./images/ico_register.png"> Kayıt Ol </a></p>
                       </div>
                     <div align="center"></br>
 <input class="button_login" type="submit" name="login" id="login" value="Login" />
</div>
<div class="clear"></div>
 </div>                  
                 </form>';
      }
      else {
      include './conn/baglan.php';
      $ja = mysql_query("SELECT login,cash FROM account.account WHERE login = '$kullanici2'");
      $nk = mysql_fetch_object($ja);
      echo '
     <center><br><b>Hosgeldin, '.$_SESSION['login'].'</b><center><br><b>EP : '.$nk->cash.'.</b><center><a href="index.php?git=market" >Markete Git </a><br>
     <br>
 <a href="index.php?git=logout">Cikis Yap</a> | <a href="index.php?git=panel">Panele Git</a>
     </center>';

      }
      ?>
 

<?php
@session_start();
include_once ("conn/temizle.php");
include_once("conn/baglan.php");
$kullanici = $_POST['kadi'];
$sifre = $_POST['pw'];  
if (isset($kullanici) && isset($sifre)) {
$baksen = mysql_query("SELECT login,password,email,social_id,real_name,id,coins FROM account.account WHERE login = '$kullanici' AND password = PASSWORD('$sifre')");
if (mysql_num_rows($baksen)) {
$haf = mysql_fetch_object($baksen);
$_SESSION['login'] = $kullanici;
$_SESSION['cash'] = $haf->coins;
$_SESSION['mail'] = $haf->email;
header ("Location:index.php?git=panel");
}
else {
echo "<script type=\"text/javascript\">javascript:alert(\"Bilgilerini Kontrol Et !\")
   location.href=\"index.php\";</script>";
}


}
?>