Password Protect With Cookies

<?php
ob_start(); //start output buffer, allow cookies
$user = "USERNAME"; //Username to protected page
$pass = "PASSWORD"; //Password to protected page
 
 
if((isset($_POST['login']) && $_POST['username'] == $user && $_POST['password'] == $pass) || (isset($_COOKIE['username']) && $_COOKIE['username'] == $user && $_COOKIE['password'] == $pass)) {  // If you entered  the username/password correctly
 
    echo "Top secret hidden content here!"; // Change content here
 
    if(isset($_POST['login'])) {
        setcookie("username", $_POST['username'],time()+(60*60*24*5), "/", ""); //set the username cookie
        setcookie("password", $_POST['password'],time()+(60*60*24*5), "/", ""); //set the password cookie
    }
 
} else if(isset($_POST['login'])) { // If you didn't enter it correctly
    echo ('Incorrect username/password!');
}
 
if(!isset($_POST['login']) && !isset($_COOKIE['username'])) { // If you didn't log in it will show the login screen
echo ('<form method="POST">
    <table>
        <tr><td>Username:</td><td><input type="text" name="username"></td></tr>
        <tr><td>Password:</td><td><input type="password" name="password"></td></tr>
        <tr><td><input type="submit" name="login" value="Log In"></td></tr>
    </table>
</form>');
}
 
?>