Problema con login Area riservata in php

[alpeweb]

Select * from utonti where pwd=$pwd And user=$user;

if(mysql_num_rows($result)==1){
$row=mysql_fetch_row($result);
header("Location: ". $row['home']);
exit();
}else "non puoi entrare";