[mamorunl]

this part makes it false: && !isset($_SESSION["username"])

I take it that the SESSION superglobal does not have a username yet at the moment of posting.