Login Problems!

// Include files			 
			 include("../include/dbVars.php");			 

			 // Create database connections
			 $dbcnx = mysql_connect($dbServer, $dbUser, $dbPass);
			 mysql_select_db($dbName) or die("<p>Could not connect to $dbName<br> " .
			 														 		 "Error:" . mysql_error() . "</p>");
			
			 // Add slashes to the username and
			 // make an MD5 checksum of the password
			 $_POST['userName'] = addslashes($_POST['userName']);
			 $_POST['userPass'] = md5($_POST['userPass']);
			 
			 $result = mysql_query("SELECT count(userID) FROM users WHERE 		
userPass = '$_POST[userPass]' AND 
userName = '$_POST[userName]'")			
or die("<p>Unable to query $dbName<br>" . 
																     "Error: " . mysql_error() . "</p>");
				
			 $numFound = mysql_result($result, 0);
			 
			 // If no number is returned, display
			 // login form
			 if (!$numFound){
			 
			 ?>
			 
			 <?php echo "Ref: " . $_SERVER['HTTP_REFERER']; ?>
			 <form method="post" action="<?php echo $_SERVER[PHP_SELF]; ?>">
  		 <table width="60%" border="0" cellspacing="0" cellpadding="0">
    	 <tr>
       		 <td>Login Form</td>
      		 <td>&nbsp;</td>
    	 </tr>
    	 <tr>
       		 <td>Name:</td>
      		 <td>
        	 <input type="text" name="userName">
      		 </td>
    	 </tr>
    	 <tr>
       		 <td>Password:</td>
      		 <td>
        	 <input type="password" name="userPass">
      		 </td>
    	 </tr>
    	 <tr>
       		 <td>&nbsp;</td>
      		 <td>
        	 <input type="submit" name="Submit" value="Submit">
      		 </td>
    	 </tr>
  		 </table>
			 </form>

			 <?php 
			 
			 }// End of if
			 
			 // If value is returned, start login session			 
			 else {
			 			//session_start();
						
						// Username & Password already slashed & md5'd
						$_SESSION['userName'] = $_POST['userName'];
						$_SESSION['userPass'] = $_POST['userPass'];
						
						
						echo("Ref: " . $_SESSION['refURL']);					
//						header('Location: $_SESSION[refURL]');
						
						
/*						echo ("Conrats!");
						echo("<h1>Login successful!</h1><br>You are now logged in as " .
								 "$_SESSION[userName] with password $_SESSION[userPass]");
								 
*/								 
			 }
			 

session_start();
			 
			 include("../include/dbVars.php");
			 
			 // Verify is session variables exist
			 if (!$_SESSION['userName'] || !$_SESSION['userPass']){
			 		
					// Redirect user to login page
					header('Location: ../admin/login.php');
					die();
			 } else {
			 	 // Verify if user has login credentials
				 $dbcnx = mysql_connect($dbServer, $dbUser, $dbPass);
				 mysql_select_db($dbName) or die("Couldn't connect to database $dbName!");
				 
				 // DB query to verify user's login information
				 $result = mysql_query("SELECT count(userId) FROM users WHERE
				 				 	 						 userPass = '$_SESSION[userPass]' AND
															 userName = '$_SESSION[userName]'") or
															 die("Error retrieving user information!");
				 
				 // False if no match found
				 $numFound = mysql_result($result, 0);
				 
				 // Test if user was verified
				 if (!$num){
				 		// If user does not verify, redirect to login.php
						// so user may login
						header('Location: ../admin/login.php');
						die();
				 }
				 
				 echo("Ref: " . $_SERVER['HTTP_REFERER']);
				 
			 }