Inlog werkt maar half

<link href="css/cms_style.css" rel="stylesheet" type="text/css" />
<link href="css/login.css" rel="stylesheet" type="text/css" />
<div class="logo_B">
		<div class="logo"></div>
	</div>
	
	<br /><br /><br /><br /><br />
	<div class="logintitel1">Login</div>
	<br /><div class="hr"></div>
	<br />
	<div class="loginbox1">
	<div class="loginboxinner1"> 
		H
	</div></div>
	
<div class="logintitel"> inloggen </div>
<div class="loginbox"><div class="loginboxinner">
<form name="login_form" method="post" action="login2.php">
 <div class="loglinks"> Gebruikersnaam</div><div class="logrechts"><input name="user" type="text" id="user" size="35">
 </div>
 <div class="loglinks"> Wachtwoord </div><div class="logrechts"> <input name="pass" type="password" id="pass" size="35"></div>
<div class="loglinks"><input type="submit" name="login" id="login" value="Login"></div>
</p>
</form>
</div></div>

<?php 
session_start();
require_once 'config.php';

    # make  a variable out of the username that was posted in the index-page.
    $username = $_POST['user'];
    # I am not sure what this thing makes.. but it has something with safety to do.
    $escaped_username = mysql_real_escape_string($username);
    # make a md5 password.
    $md5_password = md5($_POST['pass']);
    
    $queryN = mysql_query("select * from user where username = '".$username."' and password = '".$md5_password."' 
	AND level='1'");#This variable will check if the user is a level 1 user (Normal User)
    
	$queryA = mysql_query("select * from user where username = '".$username."' and password = '".$md5_password."' 
	AND level='2'");#This variable will check if the user is a level 9 user (Admin User)
    
            
    if(mysql_num_rows($queryN) == 1)
    {
        $resultN = mysql_fetch_assoc($queryN);                     
$_SESSION['user'] = $_POST['user'];    
header("location:admin/index.php");      
}


elseif(mysql_num_rows($queryA) == 1)
    {
        $resultA = mysql_fetch_assoc($queryA);                     
$_SESSION['admin'] = $_POST['user'];    
header("location:admin/index.php");      
}

else{
echo "Wrong Username or Password";
}
?>
<form name="back" method="post" action="index.php">
<input type="submit" name="back" id="back" value="Back to Home">