Is the form properly identified in the script? ie is there a <form> and </form> tag each? Also check that the form method is post (this can be found in the <form action=.... method="post" ...> tag). To me that is what the problem sounds likely to be.

Don't visit login.php at all. Visit the protected page and your login form will show up (this login form will work).

The file login.php is simply just a template and doesn't work without protection.php. Please also read the readme file because this "problem" is described in more detail there.

/Andreas