Witam mam taki problem otóż chce sobie przerobić logowanie cms`a noo i wszystko idzie oki po zalogowaniu przenosi do index.php lecz gdy dane są błędne nie pokazuję błędów nie wiem dlaczego

<?php
include("_mysql.php");
include("_settings.php");
// copy pagelock information for session test + deactivated pagelock for checklogin
$closed_tmp = $closed;
$closed = 0;
include("_functions.php");
//settings
$sleep = 1; //idle status for script if password is wrong?
//settings end
$_language->read_module('checklogin');
$get = safe_query("SELECT * FROM ".PREFIX."banned_ips WHERE ip='".$GLOBALS['ip']."'");
$ws_user = $_POST['ws_user'];
$check = safe_query("SELECT * FROM ".PREFIX."user WHERE nickname='".$ws_user."'");
$login = 0;
if($anz) {
$check = safe_query("SELECT * FROM ".PREFIX."user WHERE nickname='".$ws_user."' AND activated='1'");
// check password
$login = 0;
if($ws_pwd == $ds['password']) {
//session
$_SESSION['ws_auth'] = $ds['userID'].":".$ws_pwd;
$_SESSION['ws_lastlogin'] = $ds['lastlogin'];
$_SESSION['referer'] = $_SERVER['HTTP_REFERER'];
//remove sessiontest variable
if(isset($_SESSION['ws_sessiontest'])) unset($_SESSION['ws_sessiontest']); //cookie
setcookie("ws_auth", $ds['userID'].":".$ws_pwd, time()+($sessionduration*60
*60
)); //Delete visitor with same IP from whoisonline
safe_query("DELETE FROM ".PREFIX."whoisonline WHERE ip='".$GLOBALS['ip']."'");
//Delete IP from failed logins
safe_query("DELETE FROM ".PREFIX."failed_login_attempts WHERE ip = '".$GLOBALS['ip']."'");
$login = 1;
$error = $_language->module['login_successful'];
}
elseif(!($ws_pwd == $ds['password'])) {
$get = safe_query("SELECT wrong FROM ".PREFIX."failed_login_attempts WHERE ip = '".$GLOBALS['ip']."'");
safe_query("UPDATE ".PREFIX."failed_login_attempts SET wrong = wrong+1 WHERE ip = '".$GLOBALS['ip']."'");
}
else{
safe_query("INSERT INTO ".PREFIX."failed_login_attempts (ip,wrong) VALUES ('".$GLOBALS['ip']."',1)");
}
$get = safe_query("SELECT wrong FROM ".PREFIX."failed_login_attempts WHERE ip = '".$GLOBALS['ip']."'");
if($ban['wrong'] == $max_wrong_pw){
$bantime = time() + (60
*60
*3
); // 3 hours safe_query("INSERT INTO ".PREFIX."banned_ips (ip,deltime,reason) VALUES ('".$GLOBALS['ip']."',".$bantime.",'Possible brute force attack')");
safe_query("DELETE FROM ".PREFIX."failed_login_attempts WHERE ip = '".$GLOBALS['ip']."'");
}
}
$error= $_language->module['invalid_password'];
}
}
else $error= $_language->module['not_activated'];
}
}
else{
$login = 0;
$error = str_replace('%reason%', $data['reason'], $_language->module['ip_banned']); }
if($login) {
header("Location: index.php"); ; }
else{
header("Location: index.php"); $error;
}
?>