login.php is
only a template for the look and feel of the login page and will not actually do anything when a user logs in at your web page.
Therefore you must make sure that you have
Code:
<? include("protection.php"); ?>
at the top of your protected page and not login.php.
Also make sure you are not already logged in as admin or anything. Visit
protectedpage.php?action=logout , where
protectedpage is the page you try to protect. You should see the logout page.