Salve questa la mia pagina login.php

Codice PHP:
<div class="title">Autenticazione</div><hr size="1">
<? 
// SESSIONE
session_start();
// SE SONO SETTATE LOGIN E PASSWORD 
if(isset($_POST["user"]) && isset($_POST["pass"])) { 
// CONTROLLA NELLA TABELLA USER
$query    "SELECT * FROM utenti";
$result   mysqli_query($query);
while(
$data mysqli_fetch_array($result)) { 
    if(
$_POST["user"] == $data["user"] && $_POST["pass"] == $data["pass"]) { 
        
$logged true;
        
//
        
$_SESSION["id"]          = $data["id"];
        
$_SESSION["real"]        = $data["reale"];
        
$_SESSION["email"]       = $data["email"];
        
$_SESSION["level"]       = $data["livello"];
        } 
    }    


    
// LOGGED
    
if ($logged){
        
header("Location: main.php");
        
ob_end_flush();
        } else {
?>
        <form id="form" name="form" method="post" action="index.php">
        <div class="message">ERRORE DI AUTENTICAZIONE !!!</div>
        <hr size="1" color="#E6E6E6"; >
        <p>User:<br /><input name="user" type="text" id="user" /></p>
        <p>Pass:<br /><input name="pass" type="password" id="pass" /></p>
        <p><hr size="1" color="#E6E6E6"; ></p>
          <!-- SUBMIT -->   
          <input class="record" type="submit" value="ENTRA" />
        </form>
<? ?>


<? } else { ?>
    <form id="form" name="form" method="post" action="index.php">
    <p>User:<br /><input name="user" type="text" id="user" /></p>
    <p>Pass:<br /><input name="pass" type="password" id="pass" /></p>
    <p><hr size="1"></p>
    <!-- SUBMIT -->   
    <input class="record" type="submit" value="ENTRA" />
    </form>
<? ?>
il proble è che quando inserisco nome utente e password mi restituisce errore di autenticazione ....non capisco dove sta l'errore.