$user = $HTTP_POST_VARS["user"];    <-- ///bu alanalara dikkat \\\\\
    $pass = $HTTP_POST_VARS["pass"];    <-- ///bu alanalara dikkat\\\\\

    $user= (get_magic_quotes_gpc()) ? $_POST['user'] : addslashes($_POST['user']);
$pass= (get_magic_quotes_gpc()) ? $_POST['pass'] : addslashes($_POST['pass']);