Password code does not work

[CODe]
<? include_once(“protect.php”); ?>

<form method=”post” action=”http://”> [COLOR=Red]//I putted my protected page here[/COLOR]
<table>
<tr><td><b class=rng>Username:</b></td><td> </td><td>
<input type=”text” name=”username” size=”20″></td></tr>
<tr><td><b class=rng>Password:</b></td><td> </td><td>
<input type=”password” name=”password” size=”20″></td></tr>
<tr><td colspan=”3″ align=”center”><input type=”submit” value=” Submit “></td></tr>
</table>
</form>

<?PHP

# Change the below lines to the results that makepass.php gave you
#
$user = ’20e5c3d492611b2c68f9ae86b744bd26′;
$pass = ‘2d07fad78478d88ebafdc581a91696bf’;
#
# Change the above lines to the results that makepass.php gave you

if(md5($_POST[‘username’]) == $user && md5($_POST[‘password’]) == $pass)
{
setcookie (“verified”, true);
header (“Location:[url]http://www.[/url]”); [COLOR=Red]//my main page right here[/COLOR]
}
else
{
echo (“Incorrect Password”);
}
?>

<?PHP

# Protect page from being called directly from web browser
$back = “<form><input type=’button’ value='< Back’ onclick=’history.back()’></form>”;
$acc_denied = “<h3>Access Denied</h3>”.$back; # you could add a link to where users can login here…
if (!isset($_COOKIE[“verified”])) { die($acc_denied); }

?>
[/CODE]

people could access through without knowing the account. Please help me, thanks

Also in #PHP _↴