[CutX]

i'd say check your mysql
you say that it sends you to "loginfail.php" that'd be the case if
your first control structure (if(mysql_num_rows($result) > 0) ) equals false.
it seems like there isn't anything in $result