$message = '';
if( $login_form_submitted ){
  check user and pass params
  if ok
    redirect to main page
  else
    $message = 'login failed'
  end 
}
print login form here, including $message if it is set