Login Help

[brokenbylaw]

i wroe ths login and i was wonring if you guyys cal hellpp me wif it

<?php

$password = $_GET['password'];
$concords = "sam is a password";
$concords = str_replace(" ","thisISbull****", $concords);
$concords = strtolower($concords);
$submitted = $_GET['sbool'];
if ($submitted == "true"){

	if($password != $concords && $password != "#"){
	echo "<b>Password:</b> <input type="text" value='$password'> <b>Was incorct!</b>";
	} else{
			echo "correct!";
		  ;
} else{

echo "
<form action='stes.php' method='get'>
<input type='text' name='password'>
<input type='hidden' value='true' name='sbool'>
<input type='submit' value='login'>

</form>
";
}
?>

[Bioshox]

What exactly is wrong with it?

A little more information please .